Job Summary
AV & EDR
Key Responsibilities
Position Summary Responsible for administration, monitoring, troubleshooting, and operational support of Endpoint Security solutions including Antivirus (AV), Endpoint Detection & Response (EDR), Microsoft Defender for Endpoint, Sentinel One, and related endpoint protection technologies. Acts as the primary escalation point from L1 teams and works closely with SOC, Infrastructure, and Endpoint Management teams. Key Responsibilities: • Must have 5+ years of experience in Endpoint security and implementation (MS Defender, SentinelOne, Crowdstrike..) • Administer and support enterprise endpoint security platforms, including Antivirus (AV), Next-Generation Antivirus (NGAV), and Endpoint Detection & Response (EDR) solutions. • Monitor endpoint security alerts, malware detections, threats, and suspicious activities across managed endpoints. • investigate, analyze, and respond to security incidents, performing containment, remediation, and recovery activities as required. • Deploy, onboard, configure, and maintain AV and EDR agents on servers, desktops, and laptops.
Skill Requirements
Manage endpoint security policies, including AV, EDR, Firewall, ASR, Device Control, Web Protection, and security exclusions. • Monitor agent health, platform updates, signature updates, sensor status, and overall endpoint protection coverage. • Perform endpoint isolation, threat containment, malware eradication, and device recovery activities when required. • Troubleshoot security agent issues, policy deployment failures, onboarding problems, and telemetry visibility gaps. • Collaborate with SOC, Infrastructure, and Endpoint Management teams to investigate threats and improve security posture. • Generate operational reports, compliance dashboards, and security health metrics for management review. • Support security audits, compliance activities, documentation, SOP creation, and operational runbooks.