Job Summary :

Endpoint Security, SOC Security Operations. Role Summary: Will be responsible for managing enterprise endpoint security solutions, SOC operations, vulnerability management, security monitoring, compliance reporting, and end-user security support. The role involves administration of CrowdStrike, Sophos, ManageEngine solutions, SIEM integrations, incident response, and ensuring adherence to organizational security policies and compliance requirements.

Key Responsibilities :

- Administration and management of enterprise Endpoint Security solutions including CrowdStrike Falcon and Sophos Central, ensuring endpoint protection, policy enforcement, threat prevention, and security compliance.

- Manage the complete lifecycle of CrowdStrike Falcon, including sensor deployment, policy configuration, Real-Time Response (RTR), Host Isolation, Detection Response, IOC investigation, Custom IOA management, Falcon Fusion workflows, Identity Protection, and endpoint health monitoring.

- Perform Sophos Endpoint Administration, including policy creation, device encryption, web control, application control, peripheral/device control, tamper protection, antivirus management, and threat remediation.

- Integration of endpoint security platforms with SIEM solutions for centralized log collection, security event correlation, incident monitoring, and threat visibility.

- Manage daily Security Operations (SOC) activities, including monitoring security alerts, incident triage, investigation, containment, remediation, and closure of security incidents within defined SLAs.

- Handle security tickets through ITSM platforms, ensuring timely investigation, user communication, documentation, and resolution.

- Administration of ManageEngine Endpoint Central (Desktop Central) for endpoint management, software deployment, asset inventory, remote troubleshooting, configuration management, compliance monitoring, and patch deployment.

- Plan, deploy, and monitor enterprise-wide Patch Management activities for Windows, Linux and MAC operating systems and third-party applications to maintain security compliance.

- Manage BitLocker Drive Encryption, including deployment, recovery key management, encryption compliance monitoring, policy enforcement, and troubleshooting.

- Perform enterprise Vulnerability Management, including vulnerability assessment, risk analysis, remediation coordination, validation, compliance reporting, and closure tracking.

- Manage enterprise Data Loss Prevention (DLP) policies to prevent unauthorized data movement through USB devices, removable media, printing, clipboard, email, and file transfer channels.

- Generate and present Daily, Weekly and Monthly Security Compliance Reports, including Antivirus Compliance, Encryption Compliance, Vulnerability Compliance, Patch Compliance, Endpoint Health, Security Incident Metrics, and Executive Dashboards for management review.

- Provide L1/L2 Remote Technical Support for endpoint security incidents, malware infections, encryption issues, policy conflicts, application whitelisting, endpoint performance, and security-related user issues.

- Coordinate with internal IT teams, Infrastructure teams, SOC analysts, and external vendors to resolve complex security incidents and implement security enhancements.

- Assist in implementing security best practices aligned with ISO 27001, NIST Cybersecurity Framework, CIS Controls, and organizational information security policies.

- Maintain endpoint security documentation, SOPs, security runbooks, knowledge base articles, audit evidence, and operational reports.

- Supported internal and external audits by providing endpoint security evidence, compliance reports, configuration details, and security documentation.

Experience :

- 6-8 Years of IT Infrastructure / Cyber Security Experience

- Minimum 3+ Years of Hands-on Experience in Endpoint Security SOC Operations

Required Skills :

- CrowdStrike Falcon EDR/XDR Administration

- Sophos Central Administration

- SOC Operations

- Incident Response

- Vulnerability Management

- SIEM Integration

- Log Analysis

- ManageEngine Endpoint Central/UEM

- BitLocker Administration

- Patch Management

- Device Control

- Application Control

- Data Loss Prevention (DLP)

- Endpoint Security Management

- Security Compliance Reporting

- Remote Support Operations

- Windows Server Administration

- API Integration

- Security Automation

Key Skills :

- Cloud Security

- Cyber Security