Job Summary

Endpoint Security, SOC Security Operations. Role Summary: Will be responsible for managing enterprise endpoint security solutions, SOC operations, vulnerability management, security monitoring, compliance reporting, and end-user security support. The role involves administration of CrowdStrike, Sophos, ManageEngine solutions, SIEM integrations, incident response, and ensuring adherence to organizational security policies and compliance requirements.

Key Responsibilities

Administration and management of enterprise Endpoint Security solutions including CrowdStrike Falcon and Sophos Central, ensuring endpoint protection, policy enforcement, threat prevention, and security compliance.
Manage the complete lifecycle of CrowdStrike Falcon, including sensor deployment, policy configuration, Real-Time Response (RTR), Host Isolation, Detection Response, IOC investigation, Custom IOA management, Falcon Fusion workflows, Identity Protection, and endpoint health monitoring.
Perform Sophos Endpoint Administration, including policy creation, device encryption, web control, application control, peripheral/device control, tamper protection, antivirus management, and threat remediation.
Integration of endpoint security platforms with SIEM solutions for centralized log collection, security event correlation, incident monitoring, and threat visibility.
Manage daily Security Operations (SOC) activities, including monitoring security alerts, incident triage, investigation, containment, remediation, and closure of security incidents within defined SLAs.
Handle security tickets through ITSM platforms, ensuring timely investigation, user communication, documentation, and resolution.
Administration of ManageEngine Endpoint Central (Desktop Central) for endpoint management, software deployment, asset inventory, remote troubleshooting, configuration management, compliance monitoring, and patch deployment.
Plan, deploy, and monitor enterprise-wide Patch Management activities for Windows, Linux and MAC operating systems and third-party applications to maintain security compliance.
Manage BitLocker Drive Encryption, including deployment, recovery key management, encryption compliance monitoring, policy enforcement, and troubleshooting.
Perform enterprise Vulnerability Management, including vulnerability assessment, risk analysis, remediation coordination, validation, compliance reporting, and closure tracking.
Manage enterprise Data Loss Prevention (DLP) policies to prevent unauthorized data movement through USB devices, removable media, printing, clipboard, email, and file transfer channels.
Generate and present Daily, Weekly, and Monthly Security Compliance Reports, including Antivirus Compliance, Encryption Compliance, Vulnerability Compliance, Patch Compliance, Endpoint Health, Security Incident Metrics, and Executive Dashboards for management review.
Provide L1/L2 Remote Technical Support for endpoint security incidents, malware infections, encryption issues, policy conflicts, application whitelisting, endpoint performance, and security-related user issues.
Coordinate with internal IT teams, Infrastructure teams, SOC analysts, and external vendors to resolve complex security incidents and implement security enhancements.
Assist in implementing security best practices aligned with ISO 27001, NIST Cybersecurity Framework, CIS Controls, and organizational information security policies.
Maintain endpoint security documentation, SOPs, security runbooks, knowledge base articles, audit evidence, and operational reports.
Supported internal and external audits by providing endpoint security evidence, compliance reports, configuration details, and security documentation.

Experience

6-8 Years of IT Infrastructure / Cyber Security Experience
Minimum 3+ Years of Hands-on Experience in Endpoint Security SOC Operations

Required Skills

CrowdStrike Falcon EDR/XDR Administration
Sophos Central Administration
SOC Operations
Incident Response
Vulnerability Management
SIEM Integration
Log Analysis
ManageEngine Endpoint Central/UEM
BitLocker Administration
Patch Management
Device Control
Application Control
Data Loss Prevention (DLP)
Endpoint Security Management
Security Compliance Reporting
Remote Support Operations
Windows Server Administration
API Integration
Security Automation

Key Skills

Cloud Security
Cyber Security

Sr Engineer - Cyber Security

Job Description

No Referrers Available