EDR Administrator

GSOC Consultant

• Proven experience as a system administrator or security analyst, preferably with a focus on endpoint security.
• Certification in CrowdStrike Falcon administration or equivalent experience.
• In-depth understanding of endpoint security concepts, including malware detection, prevention, and response.
• Proficiency in deploying and configuring security tools and agents, with specific experience in CrowdStrike Falcon/MDE preferred.
• Strong knowledge of network protocols, operating systems, and cloud environments.
• Experience in developing and implementing security policies and configurations.
• Excellent communication and collaboration skills, with the ability to work effectively with cross-functional teams.
• Strong problem-solving and troubleshooting skills, with a proactive approach to identifying and resolving security issues.
• Understanding of Network protocols and communications.
• Technical expertise in Microsoft Defender for Endpoint/ Microsoft Defender for Identity.
• Hand-on experience in writing complex/advanced KQL queries.
• Understanding of Linux operating systems.
• Understanding of Windows Operating System and deployment on Azure.
• Administration of M365D portal.
• Familiarity with windows Azure infrastructure components and services.
• Understanding of various security tools and platforms like MCAS, MDI, MDAV, MIP, Intune etc.

Equal employment opportunity information

.

• Manage and administer the CrowdStrike Falcon/Microsoft Defender for Endpoint platform to ensure effective endpoint security across the organization.
• Deploy and configure CrowdStrike Falcon agents/MDE agents on endpoints, servers, and other devices.
• Monitor the health and performance of the CrowdStrike Falcon/MDE environment, including detection rates and response times.
• Develop and implement security policies, rules, and configurations within the CrowdStrike Falcon console.
• Conduct regular audits and assessments to identify vulnerabilities and ensure compliance with security standards.
• Collaborate with other IT and security teams to integrate CrowdStrike Falcon/MDE with existing security tools and processes.
• Provide training and guidance to end-users and other IT staff on the proper use and management of CrowdStrike Falcon.
• Stay up-to-date on the latest security threats and trends, and continuously enhance the organizations security posture using CrowdStrike Falcon/MDE.