Description

Design, implement, and manage the Enterprise Endpoint Detection and Response (EDR) platform and associated services.

Responsibilities

• Develop EDR architecture, federation strategies, and hardening specifications for the enterprise.
• Administer the EDR platform, managing implementation, maintenance, and continual improvement.
• Collaborate with SOC engineers and analysts on incident response to ensure endpoint containment and risk reduction.
• Integrate EDR data into central SIEM and intelligence feeds.
• Participate in incident handling processes including discovery, analysis, containment, and recovery.

Required Skills

• 5+ years of experience engineering and implementing Enterprise Endpoint Detection and Response products.
• CISSP, CISA, or GSEC certification.
• Deep understanding of security technologies including firewalls, IDS, policy management, and vulnerability assessment.
• Experience with antivirus, patch management, logging, and monitoring.
• Strong knowledge of common and emerging attack vectors, penetration methods, and countermeasures.
• Expertise in incident response coordination, escalation, and containment.
• Ability to translate technical information for non-technical audiences.

Key Skills

Education

Any Graduate