Responsibilities

• Administer, maintain, and monitor EDR and SIEM environments to ensure optimal performance.
• Tune detection rules, correlation logic, and security policies to enhance detection quality and minimize false positives.
• Configure and maintain endpoint policies, monitor agent health, manage log collection, and integrate platform functionalities.
• Develop and maintain dashboards, reports, alerts, and security use cases to streamline monitoring processes.
• Investigate and resolve noisy or ineffective detections, continuously improving the accuracy and reliability of alerts.
• Validate that endpoint protection, log collection, and response capabilities are functioning as expected.
• Integrate new log sources to enhance visibility across endpoints, servers, cloud services, and network infrastructure.
• Transform findings from incidents, threat intelligence, vulnerability assessments, and offensive security exercises into actionable monitoring content.
• Monitor the health of platforms, including storage, agent connectivity, and licensing compliance.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Proven experience in security monitoring and management, particularly with EDR and SIEM platforms.
• Strong understanding of security policies, detection rules, and incident response procedures.
• Experience with log management and analysis, as well as integrating various data sources.
• Excellent analytical skills and the ability to troubleshoot complex security issues.
• Certifications in cybersecurity (e.g., CISSP, CEH, or equivalent) are a plus.
• Strong communication skills, both written and verbal, to effectively collaborate with teams.

Benefits

• Competitive salary and performance-based bonuses.
• Flexible working hours and remote work options.
• Comprehensive health, dental, and vision insurance.
• Opportunities for professional development and continuous learning.
• Supportive work environment that values diversity and inclusion.
• Access to the latest tools and technologies in cybersecurity.