EDR Management Senior Analyst -
Job Title: Senior EDR Management Analyst
Experience: 5-10 Years
Department: Cyber Security Operations / Endpoint Security
Location: Hybrid / Remote / Onsite
Role Summary
We are looking for an experienced Senior EDR (Endpoint Detection & Response) Management Analyst responsible for administering, monitoring, optimizing, and improving enterprise endpoint security platforms. The role will focus on EDR operations, threat detection, incident investigation, endpoint hardening, policy management, threat hunting support, and security platform governance across global environments.
The ideal candidate should possess strong hands-on experience with Microsoft Defender for Endpoint, CrowdStrike Falcon, SentinelOne, Cortex XDR, VMware Carbon Black, and enterprise SOC operations.
Key Responsibilities
EDR Platform Administration
- Administer and maintain enterprise EDR platforms.
- Configure, deploy, and manage endpoint security agents.
- Monitor EDR platform health, coverage, and performance.
- Perform agent troubleshooting, upgrades, and patch management.
- Ensure endpoint compliance and protection standards are maintained.
- Support onboarding of servers, desktops, VDI, and cloud workloads.
Endpoint Security Operations
- Monitor endpoint security alerts and investigate suspicious activities.
- Validate and respond to malware, ransomware, and advanced threats.
- Analyze endpoint telemetry and behavioral indicators.
- Support incident response, containment, and remediation activities.
- Conduct root cause analysis and provide security recommendations.
Threat Detection & Threat Hunting
- Perform proactive threat hunting across enterprise endpoints.
- Investigate Indicators of Compromise (IOC) and Indicators of Attack (IOA).
- Analyze attack patterns using MITRE ATT&CK; framework.
- Detect lateral movement, privilege escalation, and persistence techniques.
- Collaborate with SOC and Threat Hunting teams during investigations.
Policy & Security Management
- Create and maintain endpoint protection policies.
- Configure attack surface reduction (ASR) policies.
- Manage device control, application control, and exploit protection.
- Implement security baselines and endpoint hardening standards.
- Reduce security risks through continuous tuning and optimization.
Detection Engineering
- Develop custom detection rules and alerting mechanisms.
- Tune alerts to minimize false positives.
- Create advanced endpoint monitoring use cases.
- Support SIEM integration and log correlation.
- Improve detection coverage and security visibility.
Incident Response Support
- Support cyber security incident investigations.
- Perform endpoint containment and isolation activities.
- Coordinate malware eradication and recovery efforts.
- Assist forensic investigations and evidence collection.
- Participate in major incident management and breach investigations.
Reporting & Governance
- Develop operational dashboards and KPI reports.
- Track endpoint security compliance and coverage.
- Support audits, risk assessments, and regulatory requirements.
- Maintain SOPs, runbooks, and operational documentation.
- Present operational updates to management and stakeholders.
Required Technical Skills
EDR Platforms
- Microsoft Defender for Endpoint
- CrowdStrike Falcon
- SentinelOne
- Palo Alto Cortex XDR
- VMware Carbon Black
- Trend Micro Vision One
Endpoint Security Technologies
- Endpoint Protection (EPP)
- Endpoint Detection & Response (EDR)
- Extended Detection & Response (XDR)
- Endpoint Hardening
- Device Control
- Application Control
- Vulnerability Management
Security Operations
- Incident Response
- Threat Hunting
- Malware Analysis
- IOC/IOA Investigation
- Digital Forensics Fundamentals
- MITRE ATT&CK; Framework
Operating Systems
- Windows Server
- Windows 10/11
- Linux
- macOS
Cloud & Identity Security
- Microsoft Entra ID
- Azure Security
- Defender for Cloud
- Conditional Access
- PIM/PAM
- Identity Protection
Scripting & Automation
- PowerShell
- Python
- KQL
- REST APIs
- JSON
Preferred Microsoft Security Stack Experience
- Microsoft Defender for Endpoint (MDE)
- Microsoft Defender XDR
- Microsoft Sentinel
- Defender for Identity
- Defender for Office 365
- Defender for Cloud
- Microsoft Entra ID
- Intune Endpoint Management
- Purview DLP
Qualifications
- Bachelor's degree in Computer Science, Cyber Security, Information Technology, or related field.
- 5-10 years of experience in Endpoint Security, SOC Operations, EDR Administration, or Incident Response.
- Experience supporting large-scale enterprise environments.
- Strong troubleshooting and analytical skills.
Preferred Certifications
Microsoft
- SC-200: Security Operations Analyst
- SC-300: Identity and Access Administrator
- AZ-500: Azure Security Engineer
- MD-102: Endpoint Administrator
Industry Certifications
- CISSP
- CISM
Responsibilities
EDR Management Senior Analyst - Job Title: Senior EDR Management Analyst
Experience: 5-10 Years
Department: Cyber Security Operations / Endpoint Security
Location: Hybrid / Remote / Onsite
Role Summary
We are looking for an experienced Senior EDR (Endpoint Detection & Response) Management Analyst responsible for administering, monitoring, optimizing, and improving enterprise endpoint security platforms. The role will focus on EDR operations, threat detection, incident investigation, endpoint hardening, policy management, threat hunting support,
and security platform governance across global environments.
The ideal candidate should possess solid hands-on experience with Microsoft Defender for Endpoint, CrowdStrike Falcon, SentinelOne, Cortex XDR, VMware Carbon Black, and enterprise SOC operations.
Key Responsibilities
EDR Platform Administration
- Administer and maintain enterprise EDR platforms.
- Configure, deploy, and manage endpoint security agents.
- Monitor EDR platform health, coverage, and performance.
- Perform agent troubleshooting, upgrades, and patch management.
- Ensure endpoint compliance and protection standards are maintained.
- Support onboarding of servers, desktops, VDI, and cloud workloads.
Endpoint Security Operations
- Monitor endpoint security alerts and investigate suspicious activities.
- Validate and respond to malware, ransomware, and advanced threats.
- Analyze endpoint telemetry and behavioral indicators.
- Support incident response, containment, and remediation activities.
- Conduct root cause analysis and provide security recommendations.
Threat Detection & Threat Hunting
- Perform proactive threat hunting across enterprise endpoints.
- Investigate Indicators of Compromise (IOC) and Indicators of Attack (IOA).
- Analyze attack patterns using MITRE ATT&CK; framework.
- Detect lateral movement, privilege escalation, and persistence techniques.
- Collaborate with SOC and Threat Hunting teams during investigations.
Policy & Security Management
- Create and maintain endpoint protection policies.
- Configure attack surface reduction (ASR) policies.
- Manage device control, application control, and exploit protection.
- Implement security baselines and endpoint hardening standards.
- Reduce security risks through continuous tuning and optimization.
Detection Engineering
- Develop custom detection rules and alerting mechanisms.
- Tune alerts to minimize false positives.
- Create advanced endpoint monitoring use cases.
- Support SIEM integration and log correlation.
- Improve detection coverage and security visibility.
Incident Response Support
- Support cyber security incident investigations.
- Perform endpoint containment and isolation activities.
- Coordinate malware eradication and recovery efforts.
- Assist forensic investigations and evidence collection.
- Participate in major incident management and breach investigations.
Reporting & Governance
- Develop operational dashboards and KPI reports.
- Track endpoint security compliance and coverage.
- Support audits, risk assessments, and regulatory requirements.
- Maintain SOPs, runbooks, and operational documentation.
- Present operational updates to management and stakeholders.
Required Technical Skills
EDR Platforms
- Microsoft Defender for Endpoint
- CrowdStrike Falcon
- SentinelOne
- Palo Alto Cortex XDR
- VMware Carbon Black
- Trend Micro Vision One
Endpoint Security Technologies
- Endpoint Protection (EPP)
- Endpoint Detection & Response (EDR)
- Extended Detection & Response (XDR)
- Endpoint Hardening
- Device Control
- Application Control
- Vulnerability Management
Security Operations
- Incident Response
- Threat Hunting
- Malware Analysis
- IOC/IOA Investigation
- Digital Forensics Fundamentals
- MITRE ATT&CK; Framework
Operating Systems
- Windows Server
- Windows 10/11
- Linux
- macOS
Cloud & Identity Security
- Microsoft Entra ID
- Azure Security
- Defender for Cloud
- Conditional Access
- PIM/PAM
- Identity Protection
Scripting & Automation
- PowerShell
- Python
- KQL
- REST APIs
- JSON
Preferred Microsoft Security Stack Experience
- Microsoft Defender for Endpoint (MDE)
- Microsoft Defender XDR
- Microsoft Sentinel
- Defender for Identity
- Defender for Office 365
- Defender for Cloud
- Microsoft Entra ID
- Intune Endpoint Management
- Purview DLP
Qualifications
- Bachelor's degree in Computer Science, Cyber Security, Information Technology, or related field.
- 5-10 years of experience in Endpoint Security, SOC Operations, EDR Administration, or Incident Response.
- Experience supporting large-scale enterprise environments.
- Strong troubleshooting and analytical skills.
Preferred Certifications
Microsoft
- SC-200: Security Operations Analyst
- SC-300: Identity and Access Administrator
- AZ-500: Azure Security Engineer
- MD-102: Endpoint Administrator
Industry Certifications
- CISSP
- CISM
Qualifications
EDR Management Senior Analyst - Job Title: Senior EDR Management Analyst
Experience: 5-10 Years
Department: Cyber Security Operations / Endpoint Security
Location: Hybrid / Remote / Onsite
Role Summary
We are looking for an experienced Senior EDR (Endpoint Detection & Response) Management Analyst responsible for administering, monitoring, optimizing, and improving enterprise endpoint security platforms. The role will focus on EDR operations, threat detection, incident investigation, endpoint hardening, policy management, threat hunting support, and security platform governance across global environments.
The ideal candidate should possess strong hands-on experience with Microsoft Defender for Endpoint, CrowdStrike Falcon, SentinelOne, Cortex XDR,
VMware Carbon Black, and enterprise SOC operations.
Key Responsibilities
EDR Platform Administration
- Administer and maintain enterprise EDR platforms.
- Configure, deploy, and manage endpoint security agents.
- Monitor EDR platform health, coverage, and performance.
- Perform agent troubleshooting, upgrades, and patch management.
- Ensure endpoint compliance and protection standards are maintained.
- Support onboarding of servers, desktops, VDI, and cloud workloads.
Endpoint Security Operations
- Monitor endpoint security alerts and investigate suspicious activities.
- Validate and respond to malware, ransomware, and advanced threats.
- Analyze endpoint telemetry and behavioral indicators.
- Support incident response, containment, and remediation activities.
- Conduct root cause analysis and provide security recommendations.
Threat Detection & Threat Hunting
- Perform proactive threat hunting across enterprise endpoints.
- Investigate Indicators of Compromise (IOC) and Indicators of Attack (IOA).
- Analyze attack patterns using MITRE ATT&CK; framework.
- Detect lateral movement, privilege escalation, and persistence techniques.
- Collaborate with SOC and Threat Hunting teams during investigations.
Policy & Security Management
- Create and maintain endpoint protection policies.
- Configure attack surface reduction (ASR) policies.
- Manage device control, application control, and exploit protection.
- Implement security baselines and endpoint hardening standards.
- Reduce security risks through continuous tuning and optimization.
Detection Engineering
- Develop custom detection rules and alerting mechanisms.
- Tune alerts to minimize false positives.
- Create advanced endpoint monitoring use cases.
- Support SIEM integration and log correlation.
- Improve detection coverage and security visibility.
Incident Response Support
- Support cyber security incident investigations.
- Perform endpoint containment and isolation activities.
- Coordinate malware eradication and recovery efforts.
- Assist forensic investigations and evidence collection.
- Participate in major incident management and breach investigations.
Reporting & Governance
- Develop operational dashboards and KPI reports.
- Track endpoint security compliance and coverage.
- Support audits, risk assessments, and regulatory requirements.
- Maintain SOPs, runbooks, and operational documentation.
- Present operational updates to management and stakeholders.
Required Technical Skills
EDR Platforms
- Microsoft Defender for Endpoint
- CrowdStrike Falcon
- SentinelOne
- Palo Alto Cortex XDR
- VMware Carbon Black
- Trend Micro Vision One
Endpoint Security Technologies
- Endpoint Protection (EPP)
- Endpoint Detection & Response (EDR)
- Extended Detection & Response (XDR)
- Endpoint Hardening
- Device Control
- Application Control
- Vulnerability Management
Security Operations
- Incident Response
- Threat Hunting
- Malware Analysis
- IOC/IOA Investigation
- Digital Forensics Fundamentals
- MITRE ATT&CK; Framework
Operating Systems
- Windows Server
- Windows 10/11
- Linux
- macOS
Cloud & Identity Security
- Microsoft Entra ID
- Azure Security
- Defender for Cloud
- Conditional Access
- PIM/PAM
- Identity Protection
Scripting & Automation
- PowerShell
- Python
- KQL
- REST APIs
- JSON
Preferred Microsoft Security Stack Experience
- Microsoft Defender for Endpoint (MDE)
- Microsoft Defender XDR
- Microsoft Sentinel
- Defender for Identity
- Defender for Office 365
- Defender for Cloud
- Microsoft Entra ID
- Intune Endpoint Management
- Purview DLP
Qualifications
- Bachelor's degree in Computer Science, Cyber Security, Information Technology, or related field.
- 5-10 years of experience in Endpoint Security, SOC Operations, EDR Administration, or Incident Response.
- Experience supporting large-scale enterprise environments.
- Strong troubleshooting and analytical skills.
Preferred Certifications
Microsoft
- SC-200: Security Operations Analyst
- SC-300: Identity and Access Administrator
- AZ-500: Azure Security Engineer
- MD-102: Endpoint Administrator
Industry Certifications
- CISSP
- CISM
At Zensar, we’re “experience-led everything”. We are committed to conceptualizing, designing, engineering, marketing, and managing digital solutions and experiences for over 130 leading enterprises.
We are a company driven by a bold purpose: Together, we shape experiences for better futures. Whether for our clients, our people, or the world around us, this belief powers everything we do. At the heart of our culture is ONE with Client - a set of four core values that reflect who we are and how we work: One Zensar, Nurturing, Empowering, and Client Focus.
Part of the $4.8 billion RPG Group, we’re a community of 10,000+ innovators across 30+ global locations, including Milpitas, Seattle, Princeton, Cape Town, London, Zurich, Singapore, and Mexico City. Explore Life at Zensar and join us to Grow. Own. Achieve. Learn. to be the best version of yourself.
We believe the best work happens when individuality is celebrated, growth is encouraged, and well-being is prioritized. We are an equal employment opportunity (EEO) and affirmative action employer, committed to creating an inclusive workplace. All qualified applicants will be considered without regard to race, creed, color, ancestry, religion, sex, national origin, citizenship, age, sexual orientation, gender identity, disability, marital status, family medical leave status, or protected veteran status.
📌 EDR Management Sr Analyst (Pune)
🏢 Zensar
📍 Pune