Endpoint Detection Analyst

Job Summary

To support cybersecurity initiatives, the full-time Endpoint Detection Analyst will manage and optimize the Falcon platform while performing threat hunting and incident response in a remote environment.

Key responsibilities

• Operate and optimize the CrowdStrike Falcon platform for endpoint protection and threat hunting
• Generate reports using APIs and configure telemetry API integrations with various SIEM and XDR tools
• Conduct incident response and workflow analysis in an enterprise environment

Required qualifications

• Minimum six years of experience managing CrowdStrike Falcon and SecureWorks
• At least three years of experience in incident response and workflow analysis using Cisco SecureWorkload/Tetration
• Proficiency in programming or scripting languages such as PowerShell, Python, and Bash
• Experience in building data pipelines using Cribl
• Knowledge of SIEM tools for log reporting and review, such as Elastic