Job title: Security Analyst L3

Contract: W2

Visa: Any visa

Location: Pittsburgh, PA (Onsite)

Responsibilities:

• Supports Carbon Black Endpoint Detection and Response (EDR) applications and ensures cyber security service availability for the endpoints.
• Supporting L1 & L2 for unresolved tickets
• Advanced Policy creation & Change Management
• Evaluate risk before implementing new policies and discuss with SME
• Handling Major Incidents/Outages
• Analyze EDR Audit logs and fix upon approval.
• Daily monitoring EDR & AV logs
• Monitor EDR dashboard for compliance, threats and further troubleshooting wherever required.
• Check if any incidents are missed by L1/L2 and follow up.
• Expert level of fine tune policies and provide service improve plans.
• Conduct in-depth analysis of endpoint data and logs to identify indicators of compromise (IOC s) and advanced attack techniques.
• 24x7 Support in Shift.

Primary Skills:

• Support during the investigation of suspected cyber security events.
• Deep knowledge and hands on experience of TCP/IP suite and ICS protocols.
• Must have project excitation experience in the OT security tools like carbon (black, crowdstrike, Armis, etc).
• Endpoint Detection Response (Carbon Black, CrowdStrike).
• Analysis and respond to the service request and incident related to security tools (Carbon Black,Armis, EDR,etc) and related policies.
• Cyber ark design and maintenance expert level knowledge and hands on experience.