Associate SME - EndPoint (EDR)

Role Overview: You will be responsible for user account management tasks such as lock/unlock, password resets, approval/rejection of access requests, user creation, deletion, and modification. Additionally, you will monitor provisioning and de-provisioning systems, identify false positive incidents, and provide ongoing monitoring for various security tools. Key Responsibilities: - Perform user account lock/unlock and password resets according to SOPs - Facilitate approval/rejection of access requests - Monitor provisioning, de-provisioning systems and escalate when necessary - Conduct user creation, deletion, and modification - Reconcile issues related to user accounts and entitlements - Identify false positive incidents and escalate as needed - Monitor Microsoft XDR, DLP, CrowdStrike Falcon, and Cato - Generate vulnerability remediation reports for patch management - Identify and resolve or escalate incidents (true positives) - Track remediation progress and provide incident management alerts - Route incidents to appropriate groups and follow up accordingly - Apply tactical fixes following documented SOPs - Monitor data protection and management agents for compliance - Stay updated on regulatory and compliance requirements - Act as the first point of contact for IT security issues for clients - Escalate issues and communicate per client escalation matrix - Manage all in-scope client requests and provide coordination services - Track and report on issue resolution progress - Escalate and follow up on trouble tickets for issue resolution - Manage trouble ticket lifecycle including opening, updating, and closing tickets Qualifications Required: - Previous experience in user account management or IT security - Familiarity with provisioning and de-provisioning systems - Knowledge of incident management processes and escalation procedures - Understanding of data protection and compliance requirements - Strong communication and coordination skills - Ability to track and report on issue resolution progress (Note: The company details are not provided in the job description),