Security Engineer

منذ 11 ساعات

Dubai, الإمارات العربية المتحدة Paramount Computer Systems دوام كامل

Security Engineer (TrendMicro, CrowdStrike EDR and Tenable)

5 Years

DXB

Full-Time

An L2 Engineer for Endpoint Protection and EDR (Endpoint Detection and Response) manages advanced security incidents, configures high-level security tools, and resolves complex endpoint threats.

Core Responsibilities (Primary Skill: Endpoint Protection & EDR)

  • Incident Response: Investigate high-severity alerts and lead containment actions for advanced security breaches.
  • Platform Administration: Manage, tune, and maintain enterprise EDR and endpoint protection agents (such as TrendMicro DSM, Symantec EPP, CrowdStrike EDR)
  • Policy Management: Design, test, and deploy strict security policies, exclusion rules, enhancing the security posture and hardening guidelines across global endpoints.
  • Threat Hunting: Proactively search environment telemetry for hidden adversary behaviours and indicators of compromise (IoCs).
  • Malware Analysis: Inspects suspicious files, memory dumps, or scripts to understand attacker methods and build defenses.
  • Root Cause Analysis: Perform deep-dive forensic analysis on compromised hosts and write comprehensive post-incident reports.
  • Vendor Escalation: Partner with tier-4 vendor support to resolve software bugs, driver conflicts, or complex platform issues.

Policy & Safe Management

  • Design safes: Establish safe structures, retention periods, and permissions.
  • Tune policies: Optimize Master Policy rules and platform settings.
  • Manage Endpoints: Onboard enforce EPP & EDR policies to meet compliance posture
  • Enhance Security Posture : Ensure on Security Policy enforcement and effectiveness

Secondary Responsibilities (Secondary Skill: Vulnerability Management)

  • Vulnerability Scanning: Schedule and oversee network and host-based vulnerability assessments using tools like Tenable, Qualys, or Rapid7.
  • Risk Prioritization: Analyze vulnerability scan reports to prioritize remediation based on active threats and business impact.
  • Remediation Tracking: Collaborate with IT and system administration teams to ensure timely patching of critical vulnerabilities.
  • Compliance Reporting: Generate security posture metrics and compliance dashboards for leadership teams.

Required Qualifications

  • Experience: 5+ years in IT security operations, with at least 3 years focused specifically on EDR and endpoint security.
  • Certifications: Industry credentials like CISSP, CEH, GCIH, or vendor-specific EDR certifications.
  • Technical Knowledge: Deep understanding of Windows, Linux, and macOS operating systems, Active Directory, and cloud environments.