EDR Operations L3 professional

We are seeking a highly skilled and experienced L3 professional to join our dynamic security team

This role involves advanced threat detection, incident response, and enhancing endpoint security capabilities using Carbon Black EDR tools

qualificationGraduation / Post-graduation in Computers, Information Systems, Computer Science, or Information Technology systems

": [ "Lead and manage advanced threat detection and response efforts using Carbon Black EDR across endpoints

Investigate and analyze sophisticated security alerts and events to determine root cause, scope, and impact of security incidents

Provide technical expertise and guidance to junior analysts (L1, L2), assisting with incident investigations, analysis, and resolution

Develop and implement advanced detection and response strategies using Carbon Black EDR to enhance overall security posture

Lead incident response efforts, coordinating with cross-functional teams and external stakeholders

Conduct in-depth analysis of endpoint data and logs to identify Indicators of Compromise (IOCs) and advanced attack techniques

Collaborate with threat intelligence teams to stay updated on emerging threats and tactics used by threat actors

Develop and maintain security playbooks, procedures, and response plans for incident response and threat hunting

Assist in tuning and optimizing Carbon Black EDR policies, SIEM rules, and custom queries to improve detection efficacy

Provide regular reports and updates on security incident trends, analysis findings, and mitigation efforts to stakeholders

" ], "requirements": [ "10+ years of work experience in cybersecurity/Information Security projects, including security posture assessment

At least one technical certification (eg, CEH, CompTIA Security+, CB CA, CSA)

At least one advanced cybersecurity certification (eg, CISM, CCIR, ECSA, GCIH)

In-depth knowledge of Carbon Black EDR and advanced threat detection techniques

Proficiency in incident response and root cause analysis

Understanding of technology-related issues and their potential business impact

Strong communication skills, both verbal and written

Knowledge of the banking business and IT practices in the banking sector

Experience with SIEM rules and custom query development

" ], "posted_onPosted 600 days ago

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.