Security Engineer TrendMicro CrowdStrike EDR And Tenable

Paramount Computer Systems; Dubai; Presencial; AED 180 000 - 290 000; Tempo integral

Resumo da oferta

Paramount Computer Systems is seeking an L2 Engineer for Endpoint Protection and EDR to manage advanced security incidents, configure high‑level tools, and resolve complex endpoint threats in a Dubai-based environment.

You will lead incident response, platform administration for EDR agents (TrendMicro DSM, Symantec EPP, CrowdStrike), and design strict policies while collaborating with vendor support to harden endpoints across global deployments.

Qualificações

• 5+ years in IT security operations with focus on EDR and endpoint security.
• Certifications like CISSP, CEH, GCIH or vendor EDR credentials.
• Deep understanding of Windows, Linux, macOS, AD and cloud environments.

Responsabilidades

• Investigate high-severity alerts and lead containment actions for breaches.
• Manage and tune EDR/endpoint protection agents across the enterprise.
• Design and deploy strict security policies and exclusion rules.
• Proactively hunt for IoCs and perform post-incident analysis.

Conhecimentos

Endpoint Protection & EDR

Incident Response

Threat Hunting

Malware Analysis

Root Cause Analysis

Ferramentas

TrendMicro DSM

Symantec EPP

CrowdStrike EDR

Tenable

Qualys

Rapid7

Descrição da oferta de emprego

Job Description:

An L2 Engineer for Endpoint Protection and EDR (Endpoint Detection and Response) manages advanced security incidents, configures high-level security tools, and resolves complex endpoint threats.

Core Responsibilities (Primary Skill: Endpoint Protection & EDR)

• Incident Response: Investigate high-severity alerts and lead containment actions for advanced security breaches.
• Platform Administration: Manage, tune, and maintain enterprise EDR and endpoint protection agents (such as TrendMicro DSM, Symantec EPP, CrowdStrike EDR)
• Policy Management: Design, test, and deploy strict security policies, exclusion rules, enhancing the security posture and hardening guidelines across global endpoints.
• Threat Hunting: Proactively search environment telemetry for hidden adversary behaviours and indicators of compromise (IoCs).
• Malware Analysis: Inspects suspicious files, memory dumps, or scripts to understand attacker methods and build defenses.
• Root Cause Analysis: Perform deep-dive forensic analysis on compromised hosts and write comprehensive post-incident reports.
• Vendor Escalation: Partner with tier-4 vendor support to resolve software bugs, driver conflicts, or complex platform issues.

Policy & Safe Management

• Design safes: Establish safe structures, retention periods, and permissions.
• Tune policies: Optimize Master Policy rules and platform settings.
• Manage Endpoints: Onboard enforce EPP & EDR policies to meet compliance posture
• Enhance Security Posture : Ensure on Security Policy enforcement and effectiveness

Secondary Responsibilities (Secondary Skill: Vulnerability Management)

• Vulnerability Scanning: Schedule and oversee network and host-based vulnerability assessments using tools like Tenable, Qualys, or Rapid7.
• Risk Prioritization: Analyze vulnerability scan reports to prioritize remediation based on active threats and business impact.
• Remediation Tracking: Collaborate with IT and system administration teams to ensure timely patching of critical vulnerabilities.
• Compliance Reporting: Generate security posture metrics and compliance dashboards for leadership teams.

Required Qualifications

• Experience: 5+ years in IT security operations, with at least 3 years focused specifically on EDR and endpoint security.
• Certifications: Industry credentials like CISSP, CEH, GCIH, or vendor-specific EDR certifications.
• Technical Knowledge: Deep understanding of Windows, Linux, and macOS operating systems, Active Directory, and cloud environments.