EDR Operations L1

Job Description :

We are seeking a skilled and vigilant L1 professional for handling EDR operations. The ideal candidate will play a key role in monitoring, analyzing, and responding to security incidents using Carbon Black EDR while ensuring SLAs are met.

Responsibility :

• Monitor Carbon Black EDR alerts and maintain SLAs.
• Research and analyze Carbon Black EDR for potential threats.
• Troubleshoot EDR agent-related issues and analyze endpoint data for Indicators of Compromise (IOCs).
• Conduct triage and assessment of security incidents, including determining scope and impact.
• Escalate confirmed security incidents to Level 2 analysts or the Incident Response team.
• Ensure EDR operations and tickets are handled and resolved within defined SLAs.
• Perform detailed threat analysis and log review using analytical skills and experience.
• Stay updated on the latest cybersecurity threats, vulnerabilities, and trends relevant to endpoints.
• Follow Runbooks, Playbooks, and Standard Operating Procedures for security incident handling.

Requirements :

Skills Required

Cybersecurity, Spyware