Sign upLog in

Endpoint Detection and Response Speciatist

TPI Global (formerly Tech Providers, Inc.)

ISD CGOB-Remote-Internal Services Department (Downey), CA(remote)

Apply
JOB DETAILS
SKILLS
Analysis Skills, Application Programming Interface (API), Automation, Bash Scripting, Cloud Computing, Command Line, Computer Security, Desktop Virtualization, Endpoint Security, Firewalls, Hunting, Incident Response, Information/Data Security (InfoSec), Internet Application, Internet Security, Malware, Microsoft Product Family, Python Programming/Scripting Language, Reporting Skills, Scripting (Scripting Languages), Security Information and Event Management (SIEM), Software as a Service (SaaS), Telemetry, USB, Virtualization, Web Server, Windows PowerShell
LOCATION
ISD CGOB-Remote-Internal Services Department (Downey), CA
POSTED
25 days ago
Role: Endpoint Detection and Response Specialist
Location: Downey, CA, 90242 (Onsite)
Duration: 12 months + Potential to extend / convert
 
Skills Required
Possess knowledge with Endpoint and Data Protection products such as CrowdStrike Falcon Endpoint Security, Falcon SaaS Security, Falcon Exposure Management, Falcon Data Protection, Falcon Recon, Fusion SOAR Ability to generate reports using APIs. Demonstrate mastery in operating and optimizing the Falcon platform.
Possess knowledge of parent and child CIDs in the CrowdStrike environment. Ability to generate reports using APIs as a CrowdStrike Falcon administrator. Demonstrate mastery in operating and optimizing the Falcon platform.
Demonstrate mastery in threat hunting using CrowdStrike and Microsoft Defender Demonstrate mastery in analyzing cybersecurity incident scope, business impact, and remediation steps. Possess knowledge with Armis and Axonius.         
 
Experience Required
Minimum five (5) years of working experience in the last 7 years serving as an organization’s subject matter expert responsible for the management of CrowdStrike Falcon.
Minimum five (5) years of working experience in the last 7 years administering CrowdStrike endpoint security for Prevention Policies, creating IOA exclusions, USB Device Control, Firewall, and creating Fusion SOAR workflows.
Minimum five (5) years of working experience in the last 7 years with malware, threat intelligence and/or sandbox analysis, process trees, file activity, command-line execution, and endpoint telemetry during security incident investigation.
Minimum five (5) years of working experience in the last 7 years investigating endpoints, SIEM, web server, and application logs to identify suspicious activities, determine scope and support incident response actions.
Minimum seven (7) years of working experience in the last 10 years with vulnerability management tools, including: Greenbone, wazuh, tenable, rapid 7, qualys
Minimum ten (10) years of working experience with programming or scripting languages such as PowerShell, Python and Bash.
Minimum ten (10) years of working experience with virtualization/VDI technologies and cloud SaaS solutions. -Minimum ten (10) years of experience in API integrations for automation.                                        

About the Company

T

TPI Global (formerly Tech Providers, Inc.)