Description

Design, implement, and manage the enterprise Endpoint Detection and Response (EDR) platform and associated services.

Responsibilities

• Develop EDR architecture, including federation strategies and multi-tenant environment configurations.
• Provide tier 3 support and act as the primary administrator for the EDR platform.
• Collaborate with SOC engineers and analysts on incident response, containment strategies, and risk reduction.
• Engineer pathways to integrate EDR information into central SIEM and intelligence feeds.
• Create hardening specifications, technical documentation, and training for users.

Required Skills

• 5+ years of experience engineering and implementing Enterprise Endpoint Detection and Response products.
• CISSP, CISA, GSEC, or an equivalent information security certification.
• Deep understanding of security technologies including firewalls, IDS, policy management, and logging/monitoring.
• Expertise in antivirus, malware prevention, vulnerability assessment, and patch management.
• Strong knowledge of common and emerging attack vectors, penetration methods, and countermeasures.
• Proven ability to translate complex technical information for non-technical audiences.
• Experience with incident response coordination, escalation, and containment.

Key Skills

Education

Any Graduate