Engineer Onsite (ITDR)

The listed salary is merely an illustrative estimate, not the actual figure.

Qualifications:

• Minimum Bachelor's degree (S1) in Information Systems, Informatics Engineering, or Computer Science.
• Minimum 1 year of experience in in Security related Solutions.
• Having Crowdstrike Certified Identity Specialist (CCIS) is preferred
• Experience in implementing and monitoring Crowdstrike solution
• Experience in managing security solution such as AD/EDR/IAM/PAM/XDR
• good understanding of operational concepts, monitoring methodologies, and troubleshooting techniques for network and security environments.
• good grasp of Incident and Escalation Management processes, including prioritization, triage, and timely service restoration
• good ability in complaint and incident handling, including clear communication of status, resolution, and RCA to technical and non-technical stakeholders.
• Good problem-solving skill, with the ability to analyze incidents and recommend effective solutions.
• Have motivation to develop, honest and high initiative

Job Description:

• Proactively monitor client infrastructure and solutions to detect and identify potential problems or errors before they impact operations.
• Monitoring and detection of suspicious activities within Identity environments (Active Directory / Azure AD).
• Proactive threat hunting for identity-based attacks (e.g., Kerberos abuse, DCSync, etc.).
• Investigation of user/account-based alerts and incidents.
• Analysis of privilege escalation and lateral movement via identity vectors.
• Identity hardening (addressing AD misconfigurations and over-privileged accounts).
• SIEM/SOAR integration and automated incident response.
• Development of identity risk dashboards and reporting.
• Continuous tuning of detection mechanisms and improvement of security use cases.
• Maintain accountability for meeting and exceeding service level agreements (SLAs) defined by customers.
• Provide timely and accurate reporting on the operational status and condition of customer infrastructure to both internal and client stakeholders.
• Develop and generate comprehensive documentation required for project lifecycle management, including MOP, RCA, CR, monthly reports, etc.
• Partner with cross-functional teams to strategically implement security controls, thereby enhancing the overall security posture of the infrastructure.
• Actively participate in cross-functional teams and projects dedicated to supporting continuous improvement and operational excellence initiatives.
• Undertake additional tasks as required to meet evolving project needs and ensure successful outcomes.

Experience:

• managing security solution such as AD/EDR/IAM/PAM/XDR: 2 years (Required)

Work Location: In person