L3 Subject Matter Expert - EDR Solutions (CrowdStrike)

Experience: 6 to Not Available years

Location: Sholinganallur, India

Skills: CrowdStrike, EDR, XDR, SIEM, SOAR, cloud security solutions, problem-solving, analytical thinking, stakeholder management, technical discussions, mentoring

Job Summary
As an L3 Subject Matter Expert, you will act as the technical lead for EDR platform management, focusing on policy optimization, platform stability, and advanced troubleshooting across multiple EDR solutions including CrowdStrike. Responsibilities include designing and fine-tuning security policies, optimizing EDR configurations, and ensuring seamless integration with SIEM and SOAR platforms. You will develop custom queries for proactive threat detection, troubleshoot platform-wide performance issues, and ensure regulatory compliance (e.g., PCI DSS, ISO 27001). Additionally, you will conduct root cause analysis (RCA) for platform failures and provide technical leadership to L2 analysts.

Key Responsibilities
• Act as the escalation point for EDR-related security incidents.
• Manage and optimize EDR policies and configurations across multiple platforms.
• Conduct deep-dive analysis of alerts, telemetry, and logs from EDR and related security tools.
• Ensure EDR integration with SIEM, SOAR, and other security platforms.
• Provide recommendations for security hardening and compliance with industry standards.




• Act as the SME for EDR solutions and provide technical guidance to L1 and L2 analysts.
• Conduct root cause analysis (RCA) and contribute to post-incident review reports.
• Collaborate with vendor support teams for issue resolution and product improvements.
• Provide technical recommendations to improve endpoint security posture.
• Ensure EDR aligns with organizational security policies and regulatory requirements.
• Develop detailed reports on incidents, security posture, and threat trends.
• Assist in audits and compliance assessments related to endpoint security.
Required Skills & Knowledge
• Expertise in CrowdStrike.
• Strong understanding of EDR, XDR, SIEM, and SOAR.
• Solid problem-solving and analytical thinking.
• Excellent communication and stakeholder management skills.
• Ability to lead technical discussions and mentor junior analysts.
• Adaptability to fast-changing security landscapes.
• Familiarity with cloud security solutions.
Work Environment & Shift Requirements
• 24x7 support model with rotational shifts (including nights, weekends, and holidays).
• Ability to work in a fast-paced, high-pressure Security environment.
• Excellent collaboration and coordination with global cybersecurity teams.
Preferred Certifications
• CrowdStrike Certified Falcon Administrator (CCFA)

📌 Subject Matter Expert EDR Solutions (CrowdStrike) (Chennai)
🏢 HCL Technologies
📍 Chennai