Security Engineer – Elastic EDR

About the role

Core42 is looking for a Security Engineer with deep expertise in the Elastic Security Platform to lead the design, implementation, and optimisation of its Endpoint Detection & Response (EDR) solution. The role focuses on ensuring continuous monitoring, threat detection, and rapid incident response across the organisation’s enterprise environment.

Key responsibilities

• Design, deploy, configure and maintain Elastic EDR infrastructure and endpoint agents.
• Manage Elastic Agent lifecycle, including deployment, upgrades, troubleshooting and policy management.
• Develop and maintain EDR baselines, security policies and endpoint hardening standards.
• Ensure high availability, scalability and performance of the Elastic Security platform.
• Integrate Elastic EDR with SIEM, SOAR, IAM, vulnerability management and threat‑intelligence platforms.
• Create and tune detection rules, behavioural analytics and advanced threat‑detection logic.
• Build custom dashboards, alerts, reports and visualisations in Kibana.
• Conduct proactive threat hunting and investigate endpoint security incidents.
• Support digital forensics, root‑cause analysis and mitigation recommendations.
• Monitor platform performance, coverage and effectiveness, establishing KPIs and operational metrics.

Required profile

• Proven hands‑on experience with Elastic Security components (Elastic Agent, Elastic Defend, Elasticsearch, Kibana).
• Strong background in detection engineering, threat hunting and incident response.
• Ability to work closely with Security Operations, Incident Response, Platform Engineering, Infrastructure and Compliance teams.

Required skills

• Elastic Agent
• Elastic Defend
• Elasticsearch
• Kibana
• Elastic Security Platform
• Detection rule development
• Threat hunting
• Incident response
• SIEM integration
• SOAR integration
• IAM integration
• Vulnerability management integration
• Threat‑intelligence platform integration
• Digital forensics
• Endpoint hardening
• Behavioural analytics
• Anomaly detection