PaloAlto Cortex XDR (Endpoint Security)

We are looking for PaloAlto Cortex XDR (Endpoint Security) - Bangalore location. Please let us know if interested.

Job Description :

• Primary mandate skill required PaloAlto Cortex XDR (Endpoint Security) and Microsoft Purview DLP
• Secondary mandate skill required Ansible Script, Gitlab CICD pipeline or Python Script and PowerBI reporting tool

Key Responsibilities:

1. Cortex XDR Agent Management:
• Monitor and troubleshoot Cortex XDR agents across multi-cloud (Azure, GCP, OCI and IBM) and on-premises environments.
• Perform advanced troubleshooting to resolve issues related to agent health, performance, and connectivity.
• Ensure Cortex XDR agents are properly installed, configured, and updated on endpoints.
2. Endpoint Remediation & Automation:
• Utilize tools such as SCCM, SUSE Manager, and Red Hat Satellite to automate agent deployment, patching, and remediation.
• Use GitLab CI/CD pipelines to automate repetitive tasks, improving efficiency and reducing manual errors.
• Develop and run scripts (Python, PowerShell, Bash) to streamline agent management and endpoint compliance.
3. System Compliance & Maintenance:
• Ensure all endpoints meet security compliance standards, maintaining the latest Cortex XDR agent versions.
• Collaborate with other IT teams to resolve configuration issues and optimize system performance.
• Conduct regular audits of the environment to identify and address potential vulnerabilities.
4. Reporting & Documentation:
• Create and maintain documentation for troubleshooting procedures, system configurations, and automation workflows.
• Generate reports on agent health, system performance, and compliance metrics for management review.
5. Data Loss Prevention (DLP) & Microsoft Defender:
• Configure, manage, and optimize DLP policies using Microsoft Defender for Cloud Apps and Microsoft Purview (formerly Microsoft Information Protection).
• Monitor, analyze, and respond to DLP alerts, identifying potential data leaks or sensitive data exposures.
• Tune DLP policies and rules based on incident analysis to improve data protection accuracy and reduce false positives.
6. On-Premises Microsoft Information Protection (MIP) Scanner:
• Deploy and manage the Microsoft Information Protection Scanner to classify, label, and protect sensitive data stored on on-premises file servers.
• Perform regular scans to detect and remediate data at risk, ensuring compliance with organizational policies.
• Troubleshoot and optimize scanner configurations for efficient data discovery and protection.