Job Description

Responsibilities

• Experience in managing end point security within cloud and containers ecosystems e.g. CrowdStrike, Wiz, Falco etc. This includes runtime security agents are configured in line with best practice and standards.
• Perform detections reviews, detection tuning, building custom detections rules, onboarding, deployment validation, and demising.
• Define reporting requirements to ensure that the capability is operating effectively across the target estate.
• Monitor outputs, data gaps, accuracy of detection and identify false positive.
• Communicate with security operations and service owners to support triage and investigations of detections.
• Support Cyber by providing configuration evidence, operational metrics for external stakeholders on demand e.g. Audit, regulators.
• Implement change management practices for policies updates and configurations changes.

Requirements

• Hands on experience with end point security tools e.g. CrowdStrike, Wiz Sensor, MS defend
• Experience integrating end point security for cloud and containers with SIEM monitoring or analytics tools.
• Hands on knowledge in cloud and containers technologies e.g. AWS, EKS, K8, GCP GKE
• Strong collaboration and stakeholder management

Attention to details and adopting risk based approach.

͏

͏

͏

͏

• Build capability to ensure operational excellence and maintain superior customer service levels for the existing client
  • Undertake trainings to stay current with any new features, changes and updates on client tool 
  • Enroll in product specific and any other trainings per client requirements/recommendations
  • Conduct training sessions for Agents and QAs on any new regulatory guideline that needs to be applied to any process urgently
  • Identifying and document most common problems and recommend appropriate changes to the team leader
  • Updates job knowledge by participating in self learning opportunities and maintaining personal networks