Role Description

EDR Administrator

Experience 3–5 Years

Location PAN India

Role Overview

We are seeking a motivated and technically skilled EDR Platform Administrator with 3–5 years of experience in administering and supporting CrowdStrike Falcon and Symantec Protection Engine (SPE) platforms. The candidate will be responsible for platform administration, policy management, agent health monitoring, troubleshooting, reporting, onboarding/offboarding activities, and customer support for enterprise security environments. The role requires strong experience in endpoint security technologies and the ability to manage large-scale deployments while maintaining platform stability and security effectiveness.

Note: This is a platform administration role focused on managing and optimizing security platforms. It does not include SOC triage, threat hunting, or incident response activities.

Key Responsibilities

CrowdStrike Falcon Administration

Administer and support the CrowdStrike Falcon platform across enterprise environments.

Manage policies, configurations, exclusions, host groups, RBAC roles, and platform settings.

Support Falcon endpoint protection, EDR/XDR, Identity Protection, Firewall Management, Exposure Management, Device Control, Asset Discovery, and Cloud Security capabilities.

Monitor sensor health, platform performance, and endpoint status.

Perform endpoint onboarding, offboarding, and sensor deployment activities.

Troubleshoot sensor communication, policy conflicts, performance issues, and platform-related incidents.

Implement platform upgrades, feature enablement, and best-practice recommendations.

Generate operational, compliance, and executive reports. Work closely with customers and vendor support teams to resolve technical issues.

Maintain platform documentation, SOPs, and knowledge articles.





Symantec Protection Engine (SPE)

Administer and maintain Symantec Protection Engine infrastructure.

Configure malware scanning policies and file inspection rules.

Manage signature updates, engine upgrades, and health monitoring activities.

Troubleshoot scanning failures, performance issues, and integration-related problems.

Support integrations with file transfer systems, storage platforms, web gateways, and enterprise applications.

Produce operational health and compliance reports.

Operational Responsibilities

Perform daily platform health checks and proactive monitoring.

Handle service requests, policy changes, and configuration updates.

Support change management and maintenance activities.

Participate in customer meetings and provide technical recommendations.

Coordinate with infrastructure, cloud, Active Directory, and endpoint management teams.

Prepare service reports, dashboards, and operational documentation.

Required Skills & Qualifications

Technical Skills

CrowdStrike Falcon

Hands-on experience administering and supporting the CrowdStrike Falcon platform, including endpoint protection, EDR/XDR, Identity Protection, Firewall Management, Exposure Management, Device Control, Asset Discovery, and Cloud Security capabilities.

Experience with policy creation and management, host groups, RBAC, sensor deployments, upgrades, exclusions, custom IOAs, agent health monitoring, troubleshooting, reporting,



and platform optimization.

Strong understanding of CrowdStrike architecture, sensor communication, deployment methodologies, and integration with Active Directory, Entra ID, SIEM, and cloud environments.

Experience supporting enterprise-scale environments and working with CrowdStrike support teams.

Symantec Protection Engine (SPE)

Hands-on experience administering Symantec Protection Engine (SPE).

Experience with malware scanning management, policy configuration, signature updates, troubleshooting, performance tuning, and platform health monitoring.

Knowledge of enterprise integrations and file scanning workflows.

Infrastructure & Security Knowledge Good understanding of Endpoint Security and Antivirus/EDR technologies.

Working knowledge of Windows Server and Linux environments.

Understanding of Active Directory and Microsoft Entra ID. Basic networking knowledge including TCP/IP, DNS, DHCP, Proxy, and Firewall concepts.

Familiarity with virtualization and cloud platforms such as Azure and AWS. Knowledge of PowerShell scripting or automation tools is preferred.

Soft Skills

Strong analytical and troubleshooting skills.

Excellent verbal and written communication skills.

Customer-focused approach with strong stakeholder management skills.

Ability to work independently and within global teams.

Robust documentation and reporting capabilities.

Preferred Qualifications

CrowdStrike Falcon certification(s) preferred.

Security+ or equivalent cybersecurity certification.

Exposure to Microsoft Defender for Endpoint, SentinelOne, Trellix, or other EDR/XDR technologies.

Experience working in managed security services or enterprise security environments.

Skills

CrowdStrike, EDR, SIEM, Cloud Security

📌 EDR Administrator (CrowdStrike Falcon and Symantec Protection Engine) (Bengaluru)
🏢 UST
📍 Bengaluru