InfoSec L2 SOC SME EDR

POSITION RESPONSIBILITIES (100%)

• Partner with onshore security teams to operationalize, maintain, and enhance endpoint detection and response (EDR) capabilities using CrowdStrike .
• Optimize the performance, reliability, and effectiveness of endpoint detections, response actions, and policy configurations to ensure comprehensive threat coverage.
• Identify opportunities to improve endpoint visibility and detection by analyzing current workflows, detection logic, and endpoint behaviors.
• Support continuous tuning of CrowdStrike detection rules, custom IOAs , and event correlation to reduce false positives and improve alert fidelity.
• Collaborate across Information Security teams (Security Operations, Threat Intelligence, Vulnerability Management, Incident Response) to align on endpoint-focused detection strategies .
• Monitor effectiveness of EDR detections, prevention policies , and response workflows ; provide recommendations for continuous improvement.
• Assist in the deployment and configuration of CrowdStrike sensors across endpoints, ensuring coverage, policy enforcement, and telemetry ingestion .
• Provide technical expertise and guidance to onshore and offshore teams to support incident investigations, containment, and root cause analysis tied to endpoint threats.
• Contribute to the development and maintenance of documentation , playbooks, and standard operating procedures (SOPs) for endpoint monitoring, response, and containment.
• Stay current with emerging endpoint threats , attacker techniques, and CrowdStrike capabilities to proactively enhance detection and response .

ORGANIZATIONAL RELATIONSHIPS

EDUCATION AND EXPERIENCE

Education :

Experience :

TECHNICAL SKILLS REQUIREMENTS

PHYSICAL POSITION REQUIREMENTS

Skills Required

L2, Powershell, Python