Job Summary:
We are seeking a Level 2 EDR Engineer with hands-on experience in managing and supporting Endpoint Detection & Response solutions. The candidate will be responsible for monitoring endpoint security, analyzing alerts, and ensuring the health and compliance of endpoints across the enterprise environment.
Key Responsibilities
Key Responsibilities:
- Monitor and analyze security alerts from EDR platforms (MDE, Trend Vision One)
- Perform incident triage, investigation, and root cause analysis
- Ensure endpoints are onboarded and reporting correctly in EDR tools
- Maintain and troubleshoot EDR agents across Windows, Linux, macOS environments
- Validate and enforce security policies and configurations
- Investigate suspicious activities and provide remediation recommendations
- Monitor endpoint health, telemetry, and connectivity issues
- Work with SOC and IT teams for incident resolution and escalation
- Generate reports on incidents, threats, and endpoint compliance
Skill Requirements
Required Skills:
- Hands-on experience with Microsoft Defender for Endpoint (MDE)
- Experience with Trend Vision One / Trend Micro endpoint security
- Understanding of endpoint security concepts and attack vectors
- Knowledge of OS internals (Windows/Linux) and threat detection techniques
- Ability to analyze logs, alerts, and endpoint telemetry
- Robust troubleshooting and analytical skills
Other Requirements
Good to Have:
- Experience with SIEM/SOAR integration (Sentinel, Splunk)
- Knowledge of MITRE ATT&CK; framework
- Basic scripting knowledge (PowerShell, Python)
Certifications (Preferred):
- Microsoft SC-200 / SC-300
- Trend Micro Certified Professional
Soft Skills:
- Good communication and stakeholder interaction
- Ability to work in 24x7 shift model
- Strong documentation and reporting skills