POSITION OVERVIEW :

Primary Skills:

Support during the investigation of suspected cyber security events

Analysis and respond to the service request and incident related to security tools (Carbon Black,Armis, EDR,etc) and related policies

Deep knowledge and hands on experience of TCP/IP suite and ICS protocols.

Must have project excitation experience in the OT security tools like carbon black, crowdstrike, Armis, etc)

Endpoint Detection Response (Carbon Black, CrowdStrike)

Cyber ark design and maintenance expert level knowledge and hands on experience

Responsibilities:

Supports Carbon Black Endpoint Detection and Response (EDR) applications and ensures cyber security service availability for the endpoints.

Daily monitoring EDR & AV logs

Monitor EDR dashboard for compliance, threats and further troubleshooting wherever required.

Check if any incidents are missed by L1/L2 and follow up.

Expert level of fine tune policies and provide service improve plans.

Supporting L1 & L2 for unresolved tickets

Advanced Policy creation & Change Management

Evaluate risk before implementing new policies and discuss with SME

Handling Major Incidents/Outages

Analyse EDR Audit logs and fix upon approval.

Conduct in-depth analysis of endpoint data and logs to identify indicators of compromise (IOC’s) and advanced attack techniques.

Minimum 7 year(s) of experience is required in OT security Tools (Carbon Black/Armies/VMDR/CrowdStrike/Cyber Arc).

Education: Bachelors Degree

Additional client information: