EDR

Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way youd like, where youll be supported and inspired bya collaborative community of colleagues around the world, and where youll be able to reimagine whats possible. Join us and help the worlds leading organizationsunlock the value of technology and build a more sustainable, more inclusive world.
 
EDR | 6 to 9 Years | Bengaluru / Mumbai/ Hyderabad 
SME will be responsible for the configuration, management, monitoring, analysis, and threat hunting related to our endpoint security suite, which includes CrowdStrike Falcon, Microsoft Defender Antivirus (ATP), Microsoft Defender Firewall, Microsoft BitLocker, and Tanium Enforce. This role requires a deep understanding of endpoint security best practices and the ability to translate them into robust endpoint protection strategies.
Responsibilities:

Configuration and Management:
o Deep dive into the functionalities of CrowdStrike Falcon, Microsoft Defender Antivirus, Microsoft Defender Firewall, and Microsoft BitLocker.
o Collaborate with security engineers to configure and optimize these tools for maximum protection against evolving threats.
o Leverage Tanium Enforce to centrally manage and enforce endpoint security policies across the organization's devices.
o Stay updated on the latest threat intelligence and adjust configurations proactively to mitigate emerging risks.

Monitoring and Analysis:
o Proactively monitor endpoint security alerts from CrowdStrike Falcon and Microsoft Defender Antivirus, identifying potential threats and incidents.
o Investigate security incidents related to endpoints, working with internal teams to understand the root cause, remediate the issue, and prevent future occurrences.
o Analyze endpoint security data to identify trends, suspicious activities, and potential vulnerabilities.
o Generate reports and provide insights into the effectiveness of your endpoint security posture.

Threat Hunting:
o Utilize advanced threat hunting techniques within CrowdStrike Falcon to proactively identify and respond to hidden threats within the network.
o Leverage Tanium Enforce for large-scale endpoint investigations and threat hunting activities.
o Collaborate with security analysts to develop and implement effective threat hunting strategies.

Collaboration and Communication:
o Work closely with security engineers, system administrators, and IT operations to ensure seamless integration of endpoint security solutions with existing infrastructure.
o Participate in security awareness training programs to educate employees on endpoint security best practices.
o Maintain clear and concise documentation of endpoint security configurations, policies, and procedures for knowledge sharing and future reference.

 Primary Skills 
Any EDR Tool.
Configuration and Management
Threat Hunting

 
Secondary Skills 
Scripting languages (Python, PowerShell)
Capgemini is a global business and technology transformation partner, helping organizations to accelerate their dual transition to a digital and sustainable world, while creating tangible impact for enterprises and society. It is a responsible and diverse group of 340,000 team members in more than 50 countries. With its strong over 55-year heritage, Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to engineering, all fuelled by its market leading capabilities in AI, cloud and data, combined with its deep industry expertise and partner ecosystem. The Group reported 2023 global revenues of 22.5 billion.