Carbon Black App Control Engineer

As a Carbon Black App Control Engineer L2, your role involves day-to-day monitoring, incident analysis, policy fine-tuning, and supporting L1 analysts. You will be managing endpoint security tools, responding to incidents, and ensuring compliance across the environment. **Key Responsibilities:** - Support investigations of suspected cyber security events on endpoints. - Analyse and respond to incidents and service requests related to Carbon Black, Armis, EDR tools, and security policies. - Provide L2-level support for Carbon Black EDR and ensure high service availability. - Daily monitoring of EDR and antivirus logs to detect threats or anomalies. - Monitor the EDR dashboard for compliance, threat alerts, and system health. - Review escalations from L1 analysts, validate incidents, and ensure closure. - Perform advanced policy creation, fine-tune existing security policies, and recommend improvements. - Create and maintain Run Books, SOPs, and documentation for security operations. - Support cross-functional security teams during incident response. - Manage policy change requests and perform change management as required. **Qualifications Required:** - Strong hands-on experience with Carbon Black App Control / Carbon Black EDR. - Experience supporting EDR platforms (Carbon Black, CrowdStrike, etc.). - Deep understanding of TCP/IP protocols. - Good knowledge of ICS/OT security protocols. - Hands-on experience with CyberArk. The job also mentions some additional details of the company such as knowledge of other endpoint tools, experience working in SOC or Incident Response teams, understanding of MITRE ATT&CK framework, and experience with AV tools, vulnerability scanners, and endpoint hardening.,