Description

You will design, implement, and manage the Enterprise Endpoint Detection and Response (EDR) platform and its associated services.

Responsibilities

• Develop EDR architecture, including federation and multi-tenant environment strategies.
• Act as the primary administrator for the EDR platform and provide tier 3 support.
• Collaborate with SOC engineers and analysts on incident response, containment strategies, and risk reduction.
• Build pathways to integrate EDR information into central SIEM and intelligence feeds.
• Create hardening specifications, system documentation, and technical training for users.
• Participate in incident handling processes including discovery, analysis, verification, and recovery.

Required Skills

• 5+ years of experience engineering and implementing Enterprise EDR products.
• CISSP, CISA, or GSEC certification.
• Deep understanding of security technologies including firewalls, IDS, and policy management.
• Expertise in antivirus, malware prevention, vulnerability assessment, and patch management.
• Knowledge of common and emerging attack vectors, penetration methods, and countermeasures.
• Experience with logging, monitoring, and incident response workflows.
• Ability to translate technical information for non-technical audiences.
• Proven skill in solving complex problems using analytical thought.

Key Skills

Education

Any Graduate