L2 EDR Administrator

3 - 5 Years
1 Opening
Bangalore

Role Proficiency:

Provide support across SIEM or EDR technologies for global customers; ensuring the platforms are functioning as expected. Independently conduct checks and basic triage for global customers under minimal guidance of senior members of the team.

Outcomes:

Measures of Outcomes:

Outputs Expected:

Platform Health Monitoring:

Technical Expertise:

Customer Focus:

Skill Examples:

Knowledge Examples:

Knowledge Examples

Additional Comments:

Team is looking to hire a L2 EDR Administrator Candidate for this position should have a strong understanding and high technical skill in the Defender, CrowdStrike or SentinelOne any 2 EDR tool (SME Level) Provide the customer with clear and concise advice on how to improve their use of EDR Solution Providing well-thought-out and reliable direction to help customers integrate, deploy, and maintain the EDR Service. Supports Endpoint Detection and Response (EDR) applications from an operational capacity and ensures cyber security service availability for all endpoint (i.e. servers, desktops and laptops). Knowledgeable in the Windows environment, including Windows Servers and Workstation, troubleshooting, and diagnosing low-level operating systems and network issues. Should have hands-on experience on Linux machines and troubleshooting skills (Deploy and configure EDR sensors on Linux machines, Troubleshoot problems on Linux machines, Collect and analyse logs from Linux machines to investigate security incidents) Should have string understanding of ITIL processes and responsible to Manage & Maintain Change management activities for the customer (Schedules change requests and ensure availability of required resources, Communication on change preparation guideline to achieve internal customer confidence, Ensure the successful implementation of the change, review all changes for effectiveness and efficiency (after completion), defines list of pre-authorized changes) In addition to having strong communication and interpersonal skills, the candidate should also be able to adapt to different communication styles. This is because they will need to be able to communicate effectively with customers over a variety of channels. Candidate to have knowledge on at least one scripting language. Scripting languages can be used to automate many tasks, including generating reports, managing systems, and deploying software. This is especially important in this role, as the majority of the reports and manual tasks are being converted into an automated fashion. Should have administration knowledge and experience of more than 1 EDR solution (Defender, CrowdStrike or SentinelOne)"

Siem,xdr,Edr,Managed Security