Lead Administrator (Support & Operations)

Job Summary

Job Summary:

We are seeking a Level 2 EDR Engineer with hands-on experience in managing and supporting Endpoint Detection & Response solutions. The candidate will be responsible for monitoring endpoint security, analyzing alerts, and ensuring the health and compliance of endpoints across the enterprise environment.

Key Responsibilities

Key Responsibilities:

- Monitor and analyze security alerts from EDR platforms (MDE, Trend Vision One)

- Perform incident triage, investigation, and root cause analysis

- Ensure endpoints are onboarded and reporting correctly in EDR tools

- Maintain and troubleshoot EDR agents across Windows, Linux, macOS environments

- Validate and enforce security policies and configurations

- Investigate suspicious activities and provide remediation recommendations

- Monitor endpoint health, telemetry, and connectivity issues

- Work with SOC and IT teams for incident resolution and escalation

- Generate reports on incidents, threats, and endpoint compliance

Skill Requirements

Required Skills:

- Hands-on experience with Microsoft Defender for Endpoint (MDE)

- Experience with Trend Vision One / Trend Micro endpoint security

- Understanding of endpoint security concepts and attack vectors

- Knowledge of OS internals (Windows/Linux) and threat detection techniques

- Ability to analyze logs, alerts, and endpoint telemetry

- Strong troubleshooting and analytical skills

Other Requirements

Good to Have:

- Experience with SIEM/SOAR integration (Sentinel, Splunk)

- Knowledge of MITRE ATT&CK framework

- Basic scripting knowledge (PowerShell, Python)

Certifications (Preferred):

- Microsoft SC-200 / SC-300

- Trend Micro Certified Professional

Soft Skills:

- Good communication and stakeholder interaction

- Ability to work in 24x7 shift model

- Strong documentation and reporting skills