1

Role: Endpoint Detection and Threat Hunting Analyst
Location: Remote
Duration: 12 months + Potential to extend / convert
 
Skills Required         
Possess knowledge with Endpoint and Data Protection products such as CrowdStrike Falcon Endpoint Security, Falcon SaaS Security, Falcon Exposure Management, Falcon Data Protection, Falcon Recon, Fusion SOAR Ability to generate reports using APIs. Demonstrate mastery in operating and optimizing the Falcon platform. Possess knowledge of parent and child CIDs in the CrowdStrike environment. Ability to generate reports using APIs as a CrowdStrike Falcon administrator. Demonstrate mastery in operating and optimizing the Falcon platform. Demonstrate ability to use Endpoint and Data Protection products for threat hunting in the environment. Possess knowledge with Axonius Possess knowledge in XDR platforms (Secureworks) Possess knowledge in SIEM tools for reporting and reviewing of logs (Elastic) Possess knowledge in API integrations and configuration   
 
Experience Required           
Minimum three (3) years of working experience within the last 4 years in Incident response in an enterprise environment -Minimum three (3) years of experience within the last 4 years configuring telemetry API integrations to various SIEM and XDR tools -Minimum six (6) years of working experience within the last 8 years serving as an organization’s subject matter expert responsible for the management of CrowdStrike Falcon and SecureWorks -Minimum six (6) years of working experience within the last 8 years administering Endpoint Detection and Response platform for Prevention Policies, creating IOA exclusions, USB Device Control, Firewall, and creating Fusion SOAR workflows. -Minimum six (6) years of working experience within the last 8 years with malware, threat intelligence and/or sandbox analysis -Minimum four (4) years of working experience with programming or scripting languages such as PowerShell, Python and Bash. -Minimum five (5) years of working experience with virtualization/VDI technologies and cloud SaaS solutions. -Minimum two (2) years of experience in API integrations for automation.