Role EDR Researcher

4-7years

Valuable working knowledge of EDR solutions such as MDATP FireEye CrowdStrike Falcon Carbon

Black

Must be wellversed with Operating System concepts ie WindowsLinuxMacOS

Ability to distinguish between False Positives and False Negatives detections with respect to logs available

Valuable Exposure to OSINT tools sandboxing encodingdecoding techniques for independent investigation

Must be able to Investigate and Triage EDR related s with an ability to share detailed investigation reports to clients within SLA

Knowledge of Cyber kill chain and MITRE ATTCK techniques and tactics used by adversary to evade detection





Awareness of various stages of Incident Response which involves indepth analysis and RCA submission on security incidents

Good understanding of Malware Analysis ie static and dynamic and its variants

Exposure to adversary simulation and red teaming tools such as Caldera PowerShell Empire

Cactus Torch

Understanding of Database language ie KQL is a Plus

Excellent communication skills for crossgroup and interpersonal skills with ability to articulate business need for detection improvements

Certification in OSCP OSCE GREM GCIH GCFA will be highly preferred

Skills

Mandatory Skills : EDR

📌 EDR Security Researcher – EDR | CrowdStrike Falcon | Microsoft Defender (Pune)
🏢 LTIMindtree
📍 Pune