Security Engineer - EDR

As a Security Engineer - EDR at IDFC FIRST Bank, your role involves implementing and maintaining Endpoint Detection and Response (EDR) systems to safeguard the organization's IT infrastructure. Your responsibilities will include: - Having a solid understanding of threat detection, MITRE ATT&CK framework, and endpoint forensics. - Demonstrating strong knowledge of Windows, macOS, and Linux endpoint security. - Managing and optimizing EDR solutions like CrowdStrike, SentinelOne, and Microsoft Defender for Endpoint (SentinelOne preferred). - Investigating and responding to endpoint security incidents using threat intelligence and behavioral analytics. - Developing and tuning EDR rules, detection signatures, and automated response playbooks. - Collaborating with SOC teams, threat hunters, and IT teams to contain and remediate incidents. - Conducting root cause analysis and documenting security events and findings. - Providing recommendations to enhance endpoint protection policies and procedures. - Maintaining dashboards, reports, and documentation for continuous monitoring and compliance. - Assisting in security assessments and audits related to endpoint security posture. - Staying updated with the latest threat landscape and EDR advancements. Mandatory Skills: - Endpoint detection and response (EDR) - SentinelOne, CrowdStrike, Microsoft - Virtual Desktop technology (VDI) - Citrix VDI, Microsoft WVD - Networking (Cisco, Juniper) - Good experience - Security Perimeter (Checkpoint, Fortigate, PaloAlto, Proxy) - Good experience - Security endpoint (AV, EDR, DLP) - Basic experience - MDM Solution (Jamf, Intune, other MDM) - Basic experience Qualifications Required: - Graduation: Bachelor of Science (B.Sc) / Bachelor of Technology (B.Tech) / Bachelor of Computer Applications (BCA) - Post-Graduation: Master of Science (M.Sc) / Master of Technology (M.Tech) / Master of Computer Applications (MCA) - Experience: 5-10 years of relevant experience.,