L2 Endpoint Security Engineer - Active Directory/LDAP (4-8 yrs)

Key Responsibilities :

Endpoint Security Operations :

- Manage and maintain endpoint security solutions, including Trellix or McAfee products.

- Configure, deploy, and update endpoint security agents and policies.

- Monitor endpoint security systems for alerts, anomalies, and potential threats.

- Investigate and respond to security incidents and breaches.

- Perform regular security assessments and vulnerability scans.

- Implement and enforce security best practices and standards.

Windows Diagnostics and Troubleshooting :

- Analyze, diagnose, and resolve issues related to Windows operating systems.

- Troubleshoot registry, service, driver, and file-related problems.

- Investigate and mitigate malware threats, including Trojans, worms, and vulnerabilities.

Active Directory and LDAP :

- Manage and maintain Active Directory and LDAP environments.

- Implement and enforce security policies and controls for Active Directory.

- Troubleshoot Active Directory and LDAP-related issues.

Database Administration :

- Write and execute SQL statements to query and manage databases.

- Troubleshoot database-related issues and performance problems.

- Ensure database security and integrity.

Virtualization and Cloud Technologies :

- Understand virtualization technologies like VMware and Hyper-V.

- Have a basic understanding of cloud concepts and services.

- Troubleshoot endpoint security issues in virtualized and cloud environments.

Required Skills and Experience :

- Strong understanding of endpoint security principles and best practices

- Hands-on experience with Trellix or McAfee endpoint security products

- Proficiency in Windows operating systems and troubleshooting techniques

- Knowledge of malware analysis and threat mitigation strategies

- Experience with Active Directory and LDAP administration

- SQL database administration skills

- Understanding of virtualization and cloud technologies

- Excellent problem-solving and analytical skills

- Strong communication and interpersonal skills

- Ability to work independently and as part of a team -

Desired Qualifications :

- Security certifications (e.g, CISSP, CISM, CISA)

- Experience with scripting languages (e.g, PowerShell, Python)

- Knowledge of SIEM and SOAR tools

- Experience with incident response and digital forensics

Notice period : 15-20-day Max