Infra Security SME / Cyber security

Cerebra Consulting, Inc.; United Kingdom; On-site; GBP 80,000 - 100,000; Full time

Job description

• Infra Security SME:
• Role: 10+ years of experience in Cybersecurity, including designing and implementing security agents, development, security agent migration, physical security exploitation, addressing design flaws, and endpoint security.
• Key Responsibilities:
• Configure and ensure the availability of required logs in Sentinel (such as EDR, Qualys, firewalls, etc.).
• Assess lab infrastructure and endpoints to determine deployment scope and strategy for EDR deployment.
• Plan for agent installation, network requirements, and compatibility with existing systems.
• Deploy Falcon agents on relevant endpoints.
• Tune settings to minimize false positives while maintaining a strong security posture.
• Collaborate with SOC consultants to configure alert rules and incident response workflows in Sentinel based on CrowdStrike telemetry.
• Simulate endpoint threats to validate EDR detection and SIEM alerting.
• Test CrowdStrike's performance against OT security visibility and threat protection use cases.
• Set up data connectors between CrowdStrike and Sentinel using APIs or native integrations.
• Document deployment steps, configurations, and integration details.