Uvod
We are seeking an experienced L2 Endpoint Security Engineer to support and manage endpoint security operations. The ideal candidate will have a strong background in security technologies, incident response, and troubleshooting in endpoint environments. This role will involve monitoring, analyzing, and responding to security threats to ensure the safety and integrity of the organization's systems and data.
Vaša vloga in odgovornosti
- Endpoint Security:
- Expertise on Endpoint Security as in DLP, AV, EDR/EPP solutions
- Experience with EDR tools (e.g., SentinelOne, CrowdStrike) and anti-virus/anti-malware solutions.
- Proficiency in analyzing and mitigating endpoint security threats and managing endpoint protection policies.
- SIEM and Incident Response:
- Hands-on experience with SIEM platforms (e.g., Splunk, QRadar, Microsoft Sentinel).
- Strong skills in incident response, threat hunting, and forensic investigation.
- Access and Identity Management:
- Familiarity with IAM concepts and tools, including MFA and SSO solutions.
- Experience with configuring and troubleshooting access control for network and endpoint systems.
- Automation and Scripting:
- Basic scripting abilities (e.g., Python, PowerShell) for automating security processes.
- Soft Skills:
- Excellent analytical and problem-solving skills.
- Effective communication skills for interacting with team members and stakeholders.
- Ability to work in a fast-paced environment and handle high-stakes incidents.
- Certifications (Preferred):
- CompTIA Security+, Cisco CCNA Security, Certified Ethical Hacker (CEH), or other relevant security certifications.
Zahtevana izobrazba
Diploma prve stopnje
Zaželena izobrazba
Diploma prve stopnje
Zahtevano strokovno in tehnično znanje
- 2-3 years of experience in security infrastructure administration
- Experience on any Products for Implementation & Operations in
- SIEM, Nessus, CEH, Qualys guard, Vulnerability Assessment and Penetration Testing, Network Security, Web Application
- Expertise of handling industry standard risk, governance and security standard methodologies and incident response processes (detection, triage, incident analysis, remediation and reporting).
- have shown attention to detail and interpersonal skills and expertise to oversee input and develop relevant metrics and Competence with Microsoft Office, e.g. Word, Presentation, Excel, Visio, etc.
- Ability to multitask and work independently with minimal direction and maximum accountability.
Zaželeno strokovno in tehnično znanje
- One or more security certifications. (CEH, Security+, GSEC, GCIH, etc).