Service Reliability Engineer
Hybrid n/a, United States Full-time Mid-level Site Reliability
At a glance
Mid-level Site Reliability role at CFC. N/a, United States · full-time · no salary stated · we estimate $115,000–$182,500 across the United States.
Estimated pay
CFC has not published a salary for this role. The figure below is our estimate, not theirs.
$115,000 – $182,500
What the middle half of mid-level site reliability roles in the United States paid, among postings that did state a salary.
Worked out from 169 postings that stated pay, median $144,000. Last updated Oct 23, 2026.
RoleSite Reliability
SeniorityMid-level
Locationn/a, United States
WorkplaceHybrid
EmploymentFull-time
PostedOct 13, 2026 · 11d ago
Role brief
devopsroles summary, based on the employer's posting.
What you'll do
- Check EDR/XDR sensors on customer endpoints, servers and cloud workloads, then correct deployments that are incomplete or fail
- Watch agent heartbeats, version changes, tamper alerts and policies across the fleet, resolving problems that threaten coverage
- Restore log ingestion when connectors or data feeds stall, and help customers and internal teams add missing sources
- Tune XDR detection rules to reduce noisy alerts while retaining coverage, and build dashboards for agent and connector health
- Maintain troubleshooting runbooks, escalate vendor issues, and share fleet health measures with recommendations for improvements
What you bring
- Three to five years administering or deploying EDR/XDR or SIEM agents and connectors in production
- Practical understanding of security sensors, including heartbeat checks, policy handling and tamper protection
- Experience connecting log sources and adjusting SIEM/XDR detection rules to reduce noise without losing coverage
- Scripting ability with Python, PowerShell or Bash, plus troubleshooting across Windows, Linux, macOS and network or cloud connections
Who this fits
This mid-level role suits someone who likes hands-on operational troubleshooting across a large, multi-tenant customer fleet and vendor platforms. You’ll work with SOC analysts, detection engineers, customers and internal teams, and take part in a rotating on-call or escalation schedule when needed. The role is hybrid in the United States.
From the employer
We are looking for a mid-level Service Reliability Engineer to own the health and reliability of the tooling that powers our managed detection and response (MDR) service — agents, connectors, and the XDR platform itself. Rather than focusing on backend infrastructure uptime, this role is about making sure the sensors and data feeds our SOC depends on are deployed correctly, stay healthy, and keep flowing across every customer environment. You'll be the person who notices when an agent goes silent, a connector stops pulling logs, or a customer's deployment drifted out of policy — and who fixes it before it becomes a detection gap.
This role is a strong fit for someone who enjoys operational problem-solving across a large multi-tenant fleet, is comfortable digging into vendor platforms, and wants to directly improve detection coverage through better tooling hygiene.
This role is a strong fit for someone who enjoys operational problem-solving across a large multi-tenant fleet, is comfortable digging into vendor platforms, and wants to directly improve detection coverage through better tooling hygiene.
- Validate that EDR/XDR agents and sensors are deployed correctly across customer endpoints, servers, and cloud workloads, and remediate incomplete or failed deployments.
- Monitor agent health across the customer fleet — heartbeat failures, offline or stale agents, version drift, tamper alerts, and policy misconfigurations — and drive issues to resolution.
- Monitor connector and integration health (log sources, API-based connectors, cloud data feeds) into the XDR/SIEM platform, and troubleshoot broken or stalled data ingestion.
- Tune the XDR platform's detection and correlation rules to reduce false positives and alert noise while preserving detection coverage.
- Identify and close data source coverage gaps by working with customers and internal teams to onboard missing log sources or reconfigure existing connectors.
- Build dashboards and alerting to give the team real-time visibility into agent and connector health across all customer environments.
- Partner with SOC analysts and detection engineers to identify when tooling gaps (silent agents, broken connectors, misconfigured policies) are creating detection blind spots.
- Maintain deployment and troubleshooting runbooks for agents, connectors, and platform tuning to support consistent handling across the team.
- Escalate and track platform-level issues with EDR/XDR/SIEM vendors when a fix falls outside our control.
- Report on fleet-wide health metrics (agent uptime, connector uptime, deployment completeness) and recommend proactive improvements.
- 3–5 years of experience deploying, administering, or supporting EDR/XDR or SIEM agents and connectors in a production environment.
- Hands-on experience with agent-based security tooling — understanding of sensor architecture, heartbeats, policy management, and tamper protection.
- Experience with connector/integration health for log sources and data feeds (syslog, API-based connectors, cloud log sources such as AWS CloudTrail, Azure, or Microsoft 365).
- Experience tuning detection or correlation rules on a SIEM/XDR platform to reduce noise without sacrificing coverage.
- Scripting/automation experience (Python, PowerShell, or Bash) to build health checks and reduce manual monitoring toil.
- Strong troubleshooting skills across Windows, Linux, and macOS endpoints, plus general networking and cloud connectivity.
- Comfortable managing and reporting on tooling health across a large, multi-tenant customer fleet.
- Comfortable participating in a rotating on-call or escalation schedule as needed.