Endpoint Detection Analyst

Job Summary

To enhance cybersecurity measures, the remote Endpoint Detection Analyst will manage and optimize Endpoint and Data Protection products, generate reports using APIs, and conduct threat hunting activities over a 12-month contract.

Key responsibilities

• Manage and optimize the Falcon platform and other Endpoint and Data Protection products for effective threat detection
• Generate reports and create data pipelines using APIs and Cribl for enhanced data analysis
• Conduct threat hunting and incident response in an enterprise environment, utilizing various SIEM and XDR tools

Required qualifications

• Minimum six years of experience managing CrowdStrike Falcon and SecureWorks in an enterprise setting
• At least three years of experience in incident response and workflow analysis using Cisco SecureWorkload/Tetration
• Proficiency in programming or scripting languages such as PowerShell, Python, and Bash
• Experience with API integrations for automation and data reporting
• Knowledge of virtualization/VDI technologies and cloud SaaS solutions