Data Security Engineer

Duties & Responsibilities

Lead and manage advanced threat detection and response efforts using Carbon Black EDR across our clients endpoints.

Investigate and analyse sophisticated security alerts and events to determine root cause, scope and impact of security incidents.

Provide technical expertise and guidance to junior analysts (L1, L2s), assisting with incident investigations, analysis and resolution.

Develop and implement advanced detection and response strategies using Carbon Black EDR to enhance our overall security posture.

Lead incident response efforts, including coordination with cross-functional teams and external stakeholders.

Conduct in-depth analysis of endpoint data and logs to identify indicators of compromise (IOC's) and advanced attack techniques.

Collaborate with other threat intelligence teams to stay updated on emerging threats and tactics used by threat actors.

Develop and maintain security playbooks, procedures and response plans for incident response and threat hunting.

Assist in the tuning and optimization of Carbon Black EDR policies, SIEM rules and custom queries to improve detection efficacy.

Stay abreast of industry best practices, emerging technologies and trends in endpoint security and threat detection.