EDR Operations L2

We are seeking a skilled and vigilant Level 2 analyst for handling EDR operations

The ideal candidate will focus on advanced threat detection, incident response, and critical security incident management using the Carbon Black EDR tool

qualificationGraduation / Post-graduation in Computers, Information Systems, Computer Science, or Information Technology systems

Utilize Carbon Black EDR to proactively identify and respond to advanced threats and security incidents

Investigate and analyze complex security alerts and events to determine root cause, scope, and impact of incidents

Deploy, manage, and troubleshoot Carbon Black EDR agents

Lead and coordinate incident response efforts, including containment, eradication, and recovery actions

Develop and implement advanced detection strategies to enhance security posture

Provide technical guidance and mentorship to Level 1 analysts, assisting with investigations and resolutions

Conduct in-depth analysis of endpoint data and logs to identify Indicators of Compromise (IOCs) and advanced attack techniques

Contribute to the development and improvement of security processes, procedures, and playbooks for incident response and threat hunting

Assist in tuning and optimizing Carbon Black EDR policies, rules, and custom queries for improved detection efficacy

Stay updated on industry best practices, emerging technologies, and trends in endpoint security and threat detection

Provide regular reports and updates on security incident trends, analysis findings, and mitigation efforts

Investigate, document, and report on information security issues and emerging trends

" ], "requirements7-10 years of work experience in cybersecurity/Information Security as an L2 analyst

At least one cybersecurity certification (eg, CEH, CompTIA Security+)

In-depth knowledge of security concepts such as cyber-attacks, threat vectors, risk management, and incident management

Proficiency in using Carbon Black EDR for advanced threat detection and incident response

Experience investigating and analyzing security alerts to determine root cause and impact

Knowledge of operating systems like Windows, Linux, and Unix

Understanding of Internet protocols and applications

Strong communication skills, both verbal and written

Ability to stay updated on emerging trends and best practices in endpoint security

" ], "posted_onPosted 600 days ago

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.