Job Description

Job Summary

Job Summary

We are seeking a Level 2 EDR Engineer with hands-on experience in managing and supporting Endpoint Detection & Response solutions. The candidate will be responsible for monitoring endpoint security, analyzing alerts, and ensuring the health and compliance of endpoints across the enterprise environment.

Key Responsibilities

Key Responsibilities

• Monitor and analyze security alerts from EDR platforms (MDE, Trend Vision One)
• Perform incident triage, investigation, and root cause analysis
• Ensure endpoints are onboarded and reporting correctly in EDR tools
• Maintain and troubleshoot EDR agents across Windows, Linux, macOS environments
• Validate and enforce security policies and configurations
• Investigate suspicious activities and provide remediation recommendations
• Monitor endpoint health, telemetry, and connectivity issues
• Work with SOC and IT teams for incident resolution and escalation
• Generate reports on incidents, threats, and endpoint compliance

Skill Requirements

Required Skills

• Hands-on experience with Microsoft Defender for Endpoint (MDE)
• Experience with Trend Vision One / Trend Micro endpoint security
• Understanding of endpoint security concepts and attack vectors
• Knowledge of OS internals (Windows/Linux) and threat detection techniques
• Ability to analyze logs, alerts, and endpoint telemetry
• Strong troubleshooting and analytical skills

Other Requirements

Good to Have:

• Experience with SIEM/SOAR integration (Sentinel, Splunk)
• Knowledge of MITRE ATT&CK framework
• Basic scripting knowledge (PowerShell, Python)

Certifications (Preferred):

• Microsoft SC-200 / SC-300
• Trend Micro Certified Professional

Soft Skills:

• Good communication and stakeholder interaction
• Ability to work in 24x7 shift model
• Strong documentation and reporting skills