Please share CV for below as 3 Months contract then on CMS IT Role , Location: Mumbai

Job Description DL2 Sentinel One EDR Support Engineer

Job Title: DL2 Sentinel One EDR Support Engineer
Department: IT Security / Endpoint Security
Experience: 3 5 Years (Minimum 2 Years of hands-on Sentinel One experience preferred)
Level: L2 / DL2 Support
Work Mode: On-site / Hybrid (as per project requirement)

Job Overview

We are looking for an experienced DL2 Sentinel One EDR Support Engineer to manage, monitor, troubleshoot, and support Endpoint Detection and Response (EDR) solutions across enterprise environments.

The candidate will be responsible for Sentinel One agent administration, endpoint security monitoring, incident investigation, threat detection, troubleshooting, and remediation. The role requires strong technical knowledge of endpoint security, Windows operating systems, malware detection, and incident response.

The engineer will work closely with L1 support, SOC teams, infrastructure teams, and security administrators to ensure endpoint security, agent health, and timely resolution of security incidents.

Key Responsibilities

1. Sentinel One EDR Administration

- Monitor and manage Sentinel One EDR console and endpoint security infrastructure.
- Perform daily health checks of Sentinel One agents across desktops, laptops, and servers.
- Manage endpoint onboarding, agent installation, upgrades, and deployment.
- Monitor agent connectivity, endpoint coverage, agent versions, and security status.
- Configure and manage Sentinel One policies, exclusions, and security settings.
- Troubleshoot agent installation, communication, update, and performance-related issues.
- Ensure endpoint security compliance as per customer security policies.

2. Incident Monitoring and Response

- Monitor Sentinel One alerts, detections, and security incidents.
- Perform L2 investigation and analysis of suspicious activities, malware, and endpoint threats.
- Validate alerts and identify false positives.
- Investigate suspicious processes, files, scripts, and endpoint behaviour.
- Perform threat containment activities, including endpoint isolation, process termination, and file quarantine, as authorized.
- Support incident remediation and endpoint recovery.
- Escalate critical security incidents to L3 / SOC / Security Operations teams.




- Maintain incident records, investigation details, and remediation status.

3. L2 Technical Troubleshooting

- Handle escalated incidents from L1 support.
- Troubleshoot Sentinel One agent issues, including:
- Agent installation and deployment failures.
- Agent offline or disconnected status.
- Agent upgrade and version issues.
- Policy synchronization failures.
- Endpoint performance and compatibility issues.
- Detection and exclusion-related issues.

- Perform root cause analysis and provide permanent solutions.
- Coordinate with Windows, Network, Server, and Security teams for resolution.
- Ensure incidents are resolved within agreed SLA timelines.

4. Endpoint Security Operations

- Monitor endpoint security posture and compliance.
- Identify endpoints with missing, outdated, or unhealthy agents.
- Support endpoint security policy implementation.
- Review security events and endpoint activity logs.
- Maintain endpoint inventory and security coverage reports.
- Assist in vulnerability and endpoint security remediation activities.
- Support security audits and compliance requirements.

5. Reporting and Documentation

- Prepare daily and weekly EDR health reports.
- Maintain incident, alert, and troubleshooting documentation.
- Track endpoint agent deployment and compliance status.
- Document root cause analysis and corrective actions.
- Maintain SOPs, knowledge base articles, and operational procedures.
- Provide regular updates to customers and internal stakeholders.

Required Technical Skills

- Hands-on experience with Sentinel One Singularity EDR.
- Strong understanding of Endpoint Detection and Response (EDR) concepts.
- Experience in Sentinel One agent installation, configuration, troubleshooting, and upgrades.
- Knowledge of Sentinel One console, endpoint monitoring, policies, exclusions, and threat response.
- Strong Windows 10/11 and Windows Server troubleshooting skills.
- Knowledge of endpoint security, malware detection, and incident management.




- Experience handling L1 escalations and L2 technical incidents.
- Understanding of networking fundamentals: TCP/IP, DNS, proxy, firewall, and connectivity troubleshooting.
- Experience with ITSM tools such as Service Now, Jira, or similar.
- Good knowledge of incident, problem, and change management processes.

Preferred Skills

- Knowledge of Sentinel One Deep Visibility and threat investigation.
- Exposure to SIEM tools such as Microsoft Sentinel, Splunk, or QRadar.
- Basic Power Shell scripting.
- Knowledge of Linux and macOS endpoint security.
- Understanding of MITRE ATT&CK; framework and endpoint threat indicators.
- Sentinel One or other relevant cybersecurity certifications.

Educational Qualification

- Bachelor's degree or diploma in Computer Science, Information Technology, Cybersecurity, or a related field.
- Relevant endpoint security certifications will be an added advantage.

Required Experience

- 3 5 years of overall IT / endpoint security experience.
- Minimum 2 years of hands-on experience with Sentinel One EDR preferred.
- Experience in L2 support, incident troubleshooting, and security operations.
- Experience working in an enterprise or managed services environment.

Key Competencies

- Strong analytical and troubleshooting skills.
- Good incident investigation and problem-solving abilities.
- Ability to manage multiple incidents and priorities.
- Excellent communication and customer support skills.
- Ability to work independently and collaboratively with security and infrastructure teams.
- Robust documentation and reporting skills.
- Customer-focused approach with ownership of incident resolution.

Key Performance Indicators (KPIs)

- Sentinel One agent health and endpoint coverage.
- Incident resolution within agreed SLA.
- Timely investigation and escalation of security alerts.
- Reduction in recurring agent-related incidents.
- Endpoint security compliance.
- Quality of incident documentation and reporting.
- Customer satisfaction and operational performance.

Role Summary: The DL2 Sentinel One EDR Support Engineer will provide L2 technical support, endpoint security monitoring, incident investigation, agent troubleshooting, and remediation support to maintain a secure and compliant enterprise endpoint environment.

📌 – SentinelOne EDR Support Engineer (India)
🏢 Sparix Global
📍 India