Job Summary

We are seeking an experienced EDR Administrator with 8+ years of cybersecurity experience and hands-on expertise in Endpoint Detection and Response (EDR/XDR) platforms such as Microsoft Defender for Endpoint (MDE), CrowdStrike Falcon, SentinelOne, and Cortex XDR. The ideal candidate will be responsible for managing endpoint security solutions, conducting threat hunting, responding to security incidents, and enhancing the organization's security posture.

Key Responsibilities

- Administer and maintain EDR/XDR platforms including CrowdStrike Falcon, SentinelOne, Microsoft Defender for Endpoint (MDE), and Cortex XDR.
- Monitor, investigate, and respond to security alerts and incidents across enterprise endpoints.
- Perform proactive threat hunting using IOCs, behavioral indicators, and MITRE ATT&CK; techniques.
- Analyze malware, suspicious activities, and endpoint telemetry to identify and mitigate threats.




- Configure and optimize EDR policies, detections, exclusions, and prevention controls.
- Integrate EDR platforms with SIEM/SOAR solutions such as Microsoft Sentinel, Splunk, QRadar, or XSOAR.
- Conduct root cause analysis and prepare incident response reports.
- Manage endpoint isolation, containment, remediation, and recovery activities.
- Develop and maintain security baselines and endpoint hardening standards.
- Collaborate with SOC, Vulnerability Management, and IT Operations teams.
- Support compliance requirements, security audits, and risk assessments.
- Create dashboards, detection rules, and custom threat-hunting queries.
- Stay updated on emerging threats, attack techniques, and cybersecurity trends.

📌 Manager - EDR Admin ( MDE / Crowdstrike / Sentinelone / Cortex XDR (Mumbai)
🏢 KPMG Assurance and Consulting Services
📍 Mumbai