[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"seo-content-skill-edr-us":3,"job-search-\u002Fde-us\u002Fjobs-by-skill\u002Fedr":8,"skill-page-filters-\u002Fde-us\u002Fjobs-by-skill\u002Fedr":225,"featured-jobs-\u002Fde-us\u002Fjobs-by-skill\u002Fedr":362},{"image_path":4,"content_de":5,"content_en":5,"composite_key":6,"last_updated":7},"\u002Fimages\u002Fskill\u002Fedr.webp",null,"skill:edr:us","2026-08-17T09:04:42.628623+02:00",{"total":9,"jobs":10},5,[11,72,121,151,195],{"id":12,"slug":13,"title":14,"raw_title":5,"is_featured":15,"company":16,"raw_hiringOrganization_logo_url":5,"processed_city_gmaps":19,"processed_country_iso_code_gmaps":21,"processed_home_office":23,"processed_salary_min":24,"processed_salary_max":25,"processed_salary_currency":26,"processed_salary_source":27,"processed_working_hours":28,"processed_employment_types":30,"processed_it_skills":31,"processed_it_skills_labels":35,"processed_job_expertise_skills":55,"processed_job_expertise_skills_labels":56,"max_cpc":70,"actual_cpc":71},78977,"senior-engineer-mdr-hcc-service-company-inc","Senior Engineer, MDR",false,{"name":17,"slug":18,"logo_url":5},"HCC Service Company, Inc.","hcc-service-company-inc",[20],"Remote",[22],"US","remote",117200,175800,"USD","estimated",[29],"FULL_TIME","permanent",{"go":32,"aws":32,"edr":33,"gcp":32,"ndr":32,"vue":34,"bash":33,"soar":33,"azure":32,"python":33,"ag grid":34,"javascript":34,"powershell":33,"typescript":34,"mdm solutions":32,"microsoft 365":32,"api development":33,"active directory":32,"microsoft intune":32},3,4,2,[36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54],"Python","PowerShell","Bash","Go","JavaScript","TypeScript","Vue","AG Grid","Active Directory","Microsoft Intune","MDM solutions","AWS","Azure","Microsoft 365","GCP","SOAR","EDR","NDR","API development",{"automation":33,"threat hunting":33,"cost management":34,"malware analysis":32,"digital forensics":32,"incident response":33,"threat intelligence":32,"security engineering":33,"software development":33,"detection engineering":33,"vulnerability management":32,"microservices architecture":32,"business controls and policies":34},[57,58,59,60,61,62,63,64,65,66,67,68,69],"Security Engineering","Automation","Incident Response","Detection Engineering","Vulnerability Management","Digital Forensics","Threat Hunting","Malware Analysis","Threat Intelligence","Software Development","Microservices Architecture","Cost Management","Business Controls and Policies",1,1.5,{"id":73,"slug":74,"title":75,"raw_title":5,"is_featured":15,"company":76,"raw_hiringOrganization_logo_url":5,"processed_city_gmaps":79,"processed_country_iso_code_gmaps":81,"processed_home_office":82,"processed_salary_min":83,"processed_salary_max":84,"processed_salary_currency":26,"processed_salary_source":27,"processed_working_hours":85,"processed_employment_types":30,"processed_it_skills":86,"processed_it_skills_labels":87,"processed_job_expertise_skills":105,"processed_job_expertise_skills_labels":106,"max_cpc":70,"actual_cpc":71},68471,"staff-engineer-ii-cyber-western-alliance-bank","Staff Engineer II - Cyber",{"name":77,"slug":78,"logo_url":5},"Western Alliance Bank","western-alliance-bank",[80],"Phoenix",[22],"onsite",130000,170000,[29],{"asm":33,"dlp":33,"edr":33,"sso":32,"wiz":32,"casb":33,"cspm":33,"ctem":33,"ldap":32,"saml":32,"linux":32,"rapid7":32,"ssl\u002Ftls":32,"firewall":32,"powershell":32,"crowdstrike":32,"vulnerability scanners":33,"microsoft defender for cloud":32,"symantec data loss prevention":32},[88,37,89,90,91,92,93,94,95,96,97,98,99,52,100,101,102,103,104],"Linux","SAML","SSO","LDAP","CSPM","ASM","CTEM","DLP","CASB","Firewall","SSL\u002FTLS","Vulnerability Scanners","Wiz","Microsoft Defender for Cloud","Rapid7","CrowdStrike","Symantec Data Loss Prevention",{"cis":33,"nist":33,"mitre":33,"banking":32,"compliance":33,"cybersecurity":33,"risk management":33,"capacity planning":32,"disaster recovery":32,"vendor management":32,"financial services":32,"security operations":33,"detection engineering":33,"vulnerability management":33,"attack surface management":33,"continuous threat exposure management":33},[107,108,109,110,60,111,61,112,113,114,115,116,117,118,119,120],"Cybersecurity","Attack Surface Management","Continuous Threat Exposure Management","Security Operations","Risk Management","Compliance","Disaster Recovery","Vendor Management","Capacity Planning","Financial Services","Banking","CIS","NIST","MITRE",{"id":122,"slug":123,"title":124,"raw_title":5,"is_featured":15,"company":125,"raw_hiringOrganization_logo_url":5,"processed_city_gmaps":128,"processed_country_iso_code_gmaps":130,"processed_home_office":131,"processed_salary_min":132,"processed_salary_max":133,"processed_salary_currency":26,"processed_salary_source":27,"processed_working_hours":134,"processed_employment_types":30,"processed_it_skills":135,"processed_it_skills_labels":136,"processed_job_expertise_skills":141,"processed_job_expertise_skills_labels":142,"max_cpc":70,"actual_cpc":71},60716,"head-of-cybersecurity-defense-operations-001-manufacturers-and-traders-trust-co","Head of Cybersecurity Defense Operations",{"name":126,"slug":127,"logo_url":5},"Manufacturers and Traders Trust Co","manufacturers-and-traders-trust-co",[129],"Buffalo",[22],"hybrid",167600,279400,[29],{"edr":33,"ndr":33,"siem":33,"soar":33,"scripting":32,"automation":33,"ai-enabled capabilities":32,"threat intelligence platforms":33},[137,51,52,53,138,58,139,140],"SIEM","Threat Intelligence Platforms","Scripting","AI-enabled capabilities",{"threat hunting":33,"risk management":33,"budget management":33,"incident response":33,"workforce planning":33,"threat intelligence":33,"data loss prevention":33,"regulatory compliance":33,"performance management":33,"cybersecurity operations":33,"insider threat management":33,"security operations center (soc) management":33},[143,59,65,63,144,145,146,147,111,148,149,150],"Cybersecurity Operations","Insider Threat Management","Data Loss Prevention","Security Operations Center (SOC) Management","Regulatory Compliance","Budget Management","Workforce Planning","Performance Management",{"id":152,"slug":153,"title":154,"raw_title":5,"is_featured":15,"company":155,"raw_hiringOrganization_logo_url":5,"processed_city_gmaps":158,"processed_country_iso_code_gmaps":160,"processed_home_office":82,"processed_salary_min":83,"processed_salary_max":161,"processed_salary_currency":26,"processed_salary_source":27,"processed_working_hours":162,"processed_employment_types":30,"processed_it_skills":163,"processed_it_skills_labels":164,"processed_job_expertise_skills":182,"processed_job_expertise_skills_labels":183,"max_cpc":70,"actual_cpc":71},57190,"manager-security-incident-response-5h0-hub-international-limited","Manager, Security Incident Response",{"name":156,"slug":157,"logo_url":5},"Hub International Limited","hub-international-limited",[159],"Chicago",[22],150000,[29],{"aws":33,"cdn":33,"dns":33,"edr":33,"gcp":33,"waf":33,"http":33,"o365":33,"saml":33,"sans":33,"siem":33,"soar":33,"azure":33,"entra":33,"oauth":33,"python":33,"tcp\u002Fip":33,"powershell":33,"nist 800-61":33,"log analysis":33,"shell scripting":33,"digital forensics":33,"evidence handling":33,"incident response":33,"timeline reconstruction":33,"microsoft active directory":33},[37,36,165,166,167,168,169,170,171,89,47,48,50,172,173,174,137,52,51,175,176,177,178,179,180,181],"Shell scripting","TCP\u002FIP","DNS","CDN","HTTP","WAF","OAuth","Microsoft Active Directory","Entra","O365","Digital forensics","Incident response","Log analysis","Timeline reconstruction","Evidence handling","NIST 800-61","SANS",{"threat hunting":33,"kpi development":33,"team management":33,"project management":33,"tabletop exercises":33,"root cause analysis":33,"forensic methodology":33,"playbook development":33,"technical archeology":33,"detection engineering":33,"security policy compliance":33,"escalation framework design":33,"incident response management":33},[184,60,63,185,186,187,188,189,190,191,192,193,194],"Incident Response Management","Forensic Methodology","Root Cause Analysis","KPI Development","Team Management","Project Management","Security Policy Compliance","Technical Archeology","Playbook Development","Escalation Framework Design","Tabletop Exercises",{"id":196,"slug":197,"title":198,"raw_title":5,"is_featured":15,"company":199,"raw_hiringOrganization_logo_url":5,"processed_city_gmaps":202,"processed_country_iso_code_gmaps":204,"processed_home_office":131,"processed_salary_min":205,"processed_salary_max":206,"processed_salary_currency":26,"processed_salary_source":27,"processed_working_hours":207,"processed_employment_types":30,"processed_it_skills":208,"processed_it_skills_labels":209,"processed_job_expertise_skills":218,"processed_job_expertise_skills_labels":219,"max_cpc":70,"actual_cpc":71},49577,"global-director-of-autonomous-cyber-defense-and-security-event-triage-soc-mufg-bank-ltd","Global Director of Autonomous Cyber Defense and Security Event Triage (SOC)",{"name":200,"slug":201,"logo_url":5},"MUFG Bank, Ltd.","mufg-bank-ltd",[203],"Tempe",[22],203000,249000,[29],{"7ai":32,"edr":33,"elk":32,"llm":33,"siem":33,"soar":33,"torq":32,"ai\u002Fml":33,"splunk":32,"tanium":32,"scripting":32,"snowflake":32,"crowdstrike":32},[210,211,51,52,137,212,213,103,214,215,216,217,139],"AI\u002FML","LLM","Splunk","ELK","Tanium","Snowflake","Torq","7AI",{"compliance":33,"purple team":33,"mitre att&ck":33,"threat hunting":33,"budget planning":33,"risk management":33,"cyber kill chain":33,"incident response":33,"vendor management":33,"security frameworks":33,"threat intelligence":33,"detection engineering":33,"cybersecurity operations":33},[143,59,63,60,220,114,111,112,221,65,222,223,224],"Budget Planning","Purple Team","Security Frameworks","MITRE ATT&CK","Cyber Kill Chain",{"industry":226,"employment_type":237,"expertise_skills":240,"it_skills":292,"salary_currency":358,"processed_working_hours":360},[227,229,231,234],{"key":228,"label":117,"count":34},"banking",{"key":230,"label":116,"count":34},"financial services",{"key":232,"label":233,"count":34},"insurance","Insurance",{"key":235,"label":236,"count":70},"employee benefits brokerage","Employee Benefits Brokerage",[238],{"key":30,"label":239,"count":9},"PERMANENT",[241,243,245,247,249,251,253,255,257,259,261,263,265,267,270,272,274,276,278,281,283,285,287,289],{"key":242,"label":63,"slug":242,"count":33},"threat-hunting",{"key":244,"label":60,"slug":244,"count":33},"detection-engineering",{"key":246,"label":111,"slug":246,"count":32},"risk-management",{"key":248,"label":59,"slug":248,"count":32},"incident-response",{"key":250,"label":65,"slug":250,"count":32},"threat-intelligence",{"key":252,"label":61,"slug":252,"count":34},"vulnerability-management",{"key":254,"label":114,"slug":254,"count":34},"vendor-management",{"key":256,"label":112,"slug":256,"count":34},"compliance",{"key":258,"label":143,"slug":258,"count":34},"cybersecurity-operations",{"key":260,"label":192,"slug":260,"count":70},"playbook-development",{"key":262,"label":110,"slug":262,"count":70},"security-operations",{"key":264,"label":150,"slug":264,"count":70},"performance-management",{"key":266,"label":190,"slug":266,"count":70},"security-policy-compliance",{"key":268,"label":269,"slug":268,"count":70},"security-operations-center-soc-management","Security Operations Center (Soc) Management",{"key":271,"label":57,"slug":271,"count":70},"security-engineering",{"key":273,"label":116,"slug":273,"count":70},"financial-services",{"key":275,"label":184,"slug":275,"count":70},"incident-response-management",{"key":277,"label":148,"slug":277,"count":70},"budget-management",{"key":279,"label":280,"slug":279,"count":70},"project-management","Project management",{"key":282,"label":222,"slug":282,"count":70},"security-frameworks",{"key":284,"label":107,"slug":284,"count":70},"cybersecurity",{"key":286,"label":145,"slug":286,"count":70},"data-loss-prevention",{"key":288,"label":221,"slug":288,"count":70},"purple-team",{"key":290,"label":291,"slug":290,"count":70},"kpi-development","Kpi Development",[293,296,299,302,305,307,310,313,316,318,321,324,327,330,333,334,337,339,342,345,347,350,352,355],{"key":294,"label":295,"slug":294,"count":9},"edr","Edr",{"key":297,"label":298,"slug":297,"count":33},"soar","Soar",{"key":300,"label":301,"slug":300,"count":32},"siem","Siem",{"key":303,"label":304,"slug":303,"count":32},"powershell","Powershell",{"key":306,"label":139,"slug":306,"count":34},"scripting",{"key":308,"label":309,"slug":308,"count":34},"crowdstrike","Crowdstrike",{"key":311,"label":312,"slug":311,"count":34},"saml","Saml",{"key":314,"label":315,"slug":314,"count":34},"ms-azure","MS Azure",{"key":317,"label":36,"slug":317,"count":34},"python",{"key":319,"label":320,"slug":319,"count":34},"gcp","Gcp",{"key":322,"label":323,"slug":322,"count":34},"aws","Aws",{"key":325,"label":326,"slug":325,"count":34},"ndr","Ndr",{"key":328,"label":329,"slug":328,"count":70},"waf","Waf",{"key":331,"label":332,"slug":331,"count":70},"log-analysis","Log Analysis",{"key":248,"label":59,"slug":248,"count":70},{"key":335,"label":336,"slug":335,"count":70},"llm","Llm",{"key":338,"label":100,"slug":338,"count":70},"wiz",{"key":340,"label":341,"slug":340,"count":70},"mdm-solutions","Mdm Solutions",{"key":343,"label":344,"slug":343,"count":70},"cdn","Cdn",{"key":346,"label":39,"slug":346,"count":70},"go",{"key":348,"label":349,"slug":348,"count":70},"dns","Dns",{"key":351,"label":104,"slug":351,"count":70},"symantec-data-loss-prevention",{"key":353,"label":354,"slug":353,"count":70},"sans","Sans",{"key":356,"label":357,"slug":356,"count":70},"7ai","7Ai",[359],{"key":26,"label":26,"count":9},[361],{"key":29,"label":29,"count":9},{"total":363,"jobs":364},0,[]]