The ideal candidate will have a passion for keeping the Windows Desktop and Server Operating Systems secure from all Cyber threats. This person will work closely with the Desktop Engineering, Server Engineering, Security Engineering and Operations teams to identify and implement all related security controls, policies, procedures (including security patching) and initiatives on physical, virtual and cloud platforms.

• Expert level experience with Windows OS, registry, file system and Event logs
• Experienced subject matter expert with hands on experience with endpoint security technologies like Endpoint Detection Response (EDR), Anti-malware solutions & Data Loss Prevention
• Mastery in log file analysis, fault isolation and diagnostic/assessment actions including root cause analysis, followed by the determination and self-directed execution of corrective actions.
• In-depth understanding of operating system (OS) internals, the mechanics of OS exploits with preventive and detective controls
• Experience with Group Policy and Intune security related configuration and management.
• Troubleshooting and managing endpoints with Intune
• Experience in investigating security incidents with ability to analyze logs to uncover details of the compromise, systems involved, threat techniques etc.
• Strong troubleshooting skills in general. Especially around OS and security settings.
• A good understanding of Active Directory, Group Policy
• Experience with scripting: VB Script, PowerShell, Batch- need to be able to write scripts, not modify
• Familiarity with using MS Azure tools to create monitoring, and configuration management.