L2 Next Gen SIEM Support Engineer

Job Description

Key Responsibilities: • Administration and management support of CrowdStrike Next-Gen SIEM/EDR • Perform threat research and threat hunting to identify emerging tactics, techniques, and procedures (TTPs) to build detection requirements using an intelligence driven approach • Develop, test, and deploy actionable high fidelity CrowdStrike Next-Gen SIEM detection rules. • Collaborate with Security Analysts to create playbooks for triage and response for actionable high-fidelity detections • Collaborate with SIEM architects to develop and define best practices for parsing data and normalizing data to a common event schema • Build and maintain utilities and tools to enable the managed services team to operate quickly and at a large scale • Analyse data, such as logs or packets captures, from various sources within the enterprise and draw conclusions regarding past and future security incidents • Develop and maintain processes and documentation