Job Type: Full time (Rotational Shift Model, including weekends and holidays)
Experience: 6+ years in Endpoint Security Operations
Job Summary:
As an L2 Subject Matter Expert, you will act as the technical lead for EDR platform management, focusing on policy optimization, platform stability, and advanced troubleshooting across multiple EDR solutions including CrowdStrike. Responsibilities include designing and fine-tuning security policies, optimizing EDR configurations, and ensuring seamless integration with SIEM and SOAR platforms. You will develop custom queries for proactive threat detection, troubleshoot platform-wide performance issues, and ensure regulatory compliance (e.g., PCI DSS, ISO 27001). Additionally, you will conduct root cause analysis (RCA) for platform failures and provide technical leadership to L2 analysts.
Key Responsibilities:
Act as the escalation point for EDR-related security incidents.
Manage and optimize EDR policies and configurations across multiple platforms.
Conduct deep-dive analysis of alerts, telemetry, and logs from EDR and related security tools.
Ensure EDR integration with SIEM, SOAR, and other security platforms.
Provide recommendations for security hardening and compliance with industry standards.
Act as the SME for EDR solutions and provide technical guidance to L1 and L2 analysts.
Conduct root cause analysis (RCA) and contribute to post-incident review reports.
Collaborate with vendor support teams for issue resolution and product improvements.
Provide technical recommendations to improve endpoint security posture.
Ensure EDR aligns with organizational security policies and regulatory requirements.
Develop detailed reports on incidents, security posture, and threat trends.
Assist in audits and compliance assessments related to endpoint s