MEDR Threat Engineer

Job not on LinkedIn

🔥 26 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Proficio

WebsiteLinkedInAll Job Openings

51 - 200 employees

🔒 Cybersecurity

☁️ SaaS

🏢 Enterprise

Cybersecurity • SaaS • Enterprise

Proficio is a cybersecurity company that specializes in Managed Detection and Response (MDR) services. Recognized as the inventor of SOC-as-a-Service, Proficio provides automated threat response and advances cybersecurity business intelligence. Their services include 24/7 security operations, risk-based vulnerability management, identity threat detection, endpoint and network protection, as well as compliance assurance to meet cyber insurance requirements. By employing advanced technologies and expert insights, Proficio ensures robust protection against evolving cyber threats, contributing to a safer business environment worldwide.

📋 Description

• Act as the SME for initiatives that enhance EDR visibility, detection, and prevention for Windows, macOS, and Linux • Develop and enhance SOAR workflows and playbooks, integrating them with EDR systems for more effective incident response and threat management • Innovate and implement sophisticated SOAR solutions, including custom automated workflows and orchestration for high-level security challenges • Define and maintain the strategy and roadmap for Carbon Black, CrowdStrike, and Sentinel One detection functionalities • Collaborate with SOC and Managed/Hosted SIEM teams to understand threat and attack trends • Identify unmet customer needs, define use cases, and advance the functional capabilities of the offering • Maintain, administer, and provide endpoint security management tools, including anti-virus, data loss prevention, and web/spam filtering • Assist customers with viruses and system vulnerabilities/threats • Implement efficiencies and strategies to better detect and respond to cyber incidents, alerts, and detections • Escalate detections, incidents, and alerts to customers through ITSM/ITIL tools

🎯 Requirements

• 4+ years of experience with IT in a professional work environment • 3+ years of experience deploying, configuring, or maintaining enterprise EDR solutions, including CrowdStrike Falcon, Microsoft Defender, and/or Sentinel One • Additional experience with Cisco Secure Endpoint and Sophos is a plus • 3+ years of experience in EDR and/or antivirus • Previous malware and attack analysis, research, investigation, and response experience is highly desirable • 1+ years of experience performing systems administration, including basic troubleshooting and installation, monitoring system performance or availability, and security upgrades • Knowledge of network security architecture concepts, including topology, protocols, components, and principles • Knowledge of enterprise operating system configurations and management tools for EDR deployment, configuration, and management • SOC experience involving incident response, vulnerability scanning, threat hunting, network monitoring/log management, or compliance management is good to have • Experience with enterprise security tools including SIEM, threat intelligence platforms, or network monitoring tools is good to have • Experience triaging security events in a SOC environment using data from enterprise security solutions • Knowledge of intrusion detection methodologies and techniques for host- and network-based intrusions • Ability to integrate cybersecurity data using enterprise or custom data aggregation and analysis tools, including Splunk and Elastic

🏖️ Benefits

• Opportunity to work in a progressive organization with structured training and roadmap for success • Meals, Gym, Internet and other reimbursement programs • Experience in one of the hottest IT industries today