Cybersecurity Engineer

Role Overview

• Administer and Maintain EDR Tools
• Tune detection rules to reduce false positives and improve threat visibility for each covered locality.
• Ensure asset inventory is accurate and up to date for each covered locality.
• Regularly update the EDR platform and agents to the latest versions.
• Review and adjust security policies.
• Conduct health checks to ensure the EDR system is functioning properly.
• Investigate and remediate unexpected agent behavior
• Ensure that Integrations are working as required and troubleshoot when issues are identified
• Administer and Maintain Vulnerability Management System
• Maintain and update the vulnerability management platform and agents
• Conduct health checks to ensure the VMS system is functioning properly.
• Tune scan policies to reduce false positives and improve accuracy for each covered locality
• Ensure asset inventory is accurate and up to date for each covered locality
• Configure and schedule scans for each covered locality.
• Investigate and remediate unexpected agent behavior
• Ensure that integrations are working as required and troubleshoot when issues are identified
• Respond to and resolve customer inquiries and issues submitted through the ticketing system and SOC
• Maintain and update the Remote Monitoring and Management platform and agents
• Accurately document customer interactions, troubleshooting steps, and resolutions
• Escalate complex or unresolved issues as needed
• Monitor ticket queues to ensure service level agreements (SLAs) are met and follow up with customers as needed

Requirements

• 4 Years Administer and Maintain EDR Tools
• 4 Years Administer and Maintain Vulnerability Management System
• Experience in information security, with a focus on security technologies.
• Excellent verbal and written communication skills; ability to convey complex security concepts in a clear and relatable manner.
• Ability to work independently and as part of a team.
• Excellent organizational skills and attention to detail.
• Relevant certifications preferred.

Benefits

• Desired Certifications
• Security+
• CrowdStrike Certified Falcon Administrator (CCFA)
• Tenable Certified
• Additional Cybersecurity Related Certifications