EDR Management Senior Analyst - Job Description
Job Title: Senior EDR Management Analyst
Experience: 5-10 Years
Department: Cyber Security Operations / Endpoint Security
Location: Hybrid / Remote / Onsite

Role Summary

We are looking for an experienced Senior EDR (Endpoint Detection & Response) Management Analyst responsible for administering, monitoring, optimizing, and improving enterprise endpoint security platforms. The role will focus on EDR operations, threat detection, incident investigation, endpoint hardening, policy management, threat hunting support, and security platform governance across global environments.

The ideal candidate should possess strong hands-on experience with Microsoft Defender for Endpoint, CrowdStrike Falcon, SentinelOne, Cortex XDR, VMware Carbon Black, and enterprise SOC operations.

EDR Platform Administration

Administer and maintain enterprise EDR platforms.
Configure, deploy, and manage endpoint security agents.
Monitor EDR platform health, coverage, and performance.
Perform agent troubleshooting, upgrades, and patch management.
Ensure endpoint compliance and protection standards are maintained.
Support onboarding of servers, desktops, VDI, and cloud workloads.

Endpoint Security Operations

Monitor endpoint security alerts and investigate suspicious activities.
Validate and respond to malware, ransomware, and advanced threats.
Analyze endpoint telemetry and behavioral indicators.
Support incident response, containment, and remediation activities.
Conduct root cause analysis and provide security recommendations.

Threat Detection & Threat Hunting

Perform proactive threat hunting across enterprise endpoints.
Investigate Indicators of Compromise (IOC) and Indicators of Attack (IOA).
Analyze attack patterns using MITRE ATT&CK framework.
Detect lateral movement, privilege escalation, and persistence techniques.
Collaborate with SOC and Threat Hunting teams during investigations.

Policy & Security Management

Create and maintain endpoint protection policies.
Configure attack surface reduction (ASR) policies.
Manage device control, application control, and exploit protection.
Implement security baselines and endpoint hardening standards.
Reduce security risks through continuous tuning and optimization.

Detection Engineering

Develop custom detection rules and alerting mechanisms.
Tune alerts to minimize false positives.
Create advanced endpoint monitoring use cases.
Support SIEM integration and log correlation.
Improve detection coverage and security visibility.

Incident Response Support

Support cyber security incident investigations.
Perform endpoint containment and isolation activities.
Coordinate malware eradication and recovery efforts.
Assist forensic investigations and evidence collection.
Participate in major incident management and breach investigations.

Reporting & Governance

Develop operational dashboards and KPI reports.
Track endpoint security compliance and coverage.
Support audits, risk assessments, and regulatory requirements.
Maintain SOPs, runbooks, and operational documentation.
Present operational updates to management and stakeholders.

EDR Platforms

Microsoft Defender for Endpoint

Linux

macOS

Azure Security

Defender for Cloud

Preferred Microsoft Security Stack Experience

Microsoft Defender for Endpoint (MDE)

Microsoft Sentinel

Defender for Identity
Defender for Office 365
Defender for Cloud

Microsoft Entra ID

Purview DLP

Bachelor's degree in Computer Science, Cyber Security, Information Technology, or related field.
5-10 years of experience in Endpoint Security, SOC Operations, EDR Administration, or Incident Response.
Experience supporting large-scale enterprise environments.
Strong troubleshooting and analytical skills.

Microsoft

SC-200: Security Operations Analyst
SC-300: Identity and Access Administrator
AZ-500: Azure Security Engineer
MD-102: Endpoint Administrator

CISM

EDR Management Senior Analyst - Job Description
Job Title: Senior EDR Management Analyst
Experience: 5-10 Years
Department: Cyber Security Operations / Endpoint Security
Location: Hybrid / Remote / Onsite

Role Summary

We are looking for an experienced Senior EDR (Endpoint Detection & Response) Management Analyst responsible for administering, monitoring, optimizing, and improving enterprise endpoint security platforms. The role will focus on EDR operations, threat detection, incident investigation, endpoint hardening, policy management, threat hunting support, and security platform governance across global environments.

The ideal candidate should possess strong hands-on experience with Microsoft Defender for Endpoint, CrowdStrike Falcon, SentinelOne, Cortex XDR, VMware Carbon Black, and enterprise SOC operations.

Key Responsibilities

EDR Platform Administration

Administer and maintain enterprise EDR platforms.
Configure, deploy, and manage endpoint security agents.
Monitor EDR platform health, coverage, and performance.
Perform agent troubleshooting, upgrades, and patch management.
Ensure endpoint compliance and protection standards are maintained.
Support onboarding of servers, desktops, VDI, and cloud workloads.

Endpoint Security Operations

Monitor endpoint security alerts and investigate suspicious activities.
Validate and respond to malware, ransomware, and advanced threats.
Analyze endpoint telemetry and behavioral indicators.
Support incident response, containment, and remediation activities.
Conduct root cause analysis and provide security recommendations.

Threat Detection & Threat Hunting

Perform proactive threat hunting across enterprise endpoints.
Investigate Indicators of Compromise (IOC) and Indicators of Attack (IOA).
Analyze attack patterns using MITRE ATT&CK framework.
Detect lateral movement, privilege escalation, and persistence techniques.
Collaborate with SOC and Threat Hunting teams during investigations.

Policy & Security Management

Create and maintain endpoint protection policies.
Configure attack surface reduction (ASR) policies.
Manage device control, application control, and exploit protection.
Implement security baselines and endpoint hardening standards.
Reduce security risks through continuous tuning and optimization.

Detection Engineering

Develop custom detection rules and alerting mechanisms.
Tune alerts to minimize false positives.
Create advanced endpoint monitoring use cases.
Support SIEM integration and log correlation.
Improve detection coverage and security visibility.

Incident Response Support

Support cyber security incident investigations.
Perform endpoint containment and isolation activities.
Coordinate malware eradication and recovery efforts.
Assist forensic investigations and evidence collection.
Participate in major incident management and breach investigations.

Reporting & Governance

Develop operational dashboards and KPI reports.
Track endpoint security compliance and coverage.
Support audits, risk assessments, and regulatory requirements.
Maintain SOPs, runbooks, and operational documentation.
Present operational updates to management and stakeholders.

Required Technical Skills

EDR Platforms

Microsoft Defender for Endpoint

CrowdStrike Falcon

SentinelOne

Palo Alto Cortex XDR

VMware Carbon Black

Trend Micro Vision One

Endpoint Security Technologies

Endpoint Protection (EPP)

Endpoint Detection & Response (EDR)

Extended Detection & Response (XDR)

Endpoint Hardening

Device Control

Application Control

Vulnerability Management

Security Operations

Incident Response

Threat Hunting

Malware Analysis

IOC/IOA Investigation

Digital Forensics Fundamentals

MITRE ATT&CK Framework

Operating Systems

Windows Server

Windows 10/11

Linux

macOS

Cloud & Identity Security

Microsoft Entra ID

Azure Security

Defender for Cloud

Conditional Access

PIM/PAM

Identity Protection

Scripting & Automation

PowerShell

Python

KQL

REST APIs

JSON

Preferred Microsoft Security Stack Experience

Microsoft Defender for Endpoint (MDE)

Microsoft Defender XDR

Microsoft Sentinel

Defender for Identity
Defender for Office 365
Defender for Cloud

Microsoft Entra ID

Intune Endpoint Management

Purview DLP

Bachelor's degree in Computer Science, Cyber Security, Information Technology, or related field.
5-10 years of experience in Endpoint Security, SOC Operations, EDR Administration, or Incident Response.
Experience supporting large-scale enterprise environments.
Strong troubleshooting and analytical skills.

Preferred Certifications

Microsoft

SC-200: Security Operations Analyst
SC-300: Identity and Access Administrator
AZ-500: Azure Security Engineer
MD-102: Endpoint Administrator

Industry Certifications

CISSP

CISM

EDR Management Senior Analyst - Job Description
Job Title: Senior EDR Management Analyst
Experience: 5-10 Years
Department: Cyber Security Operations / Endpoint Security
Location: Hybrid / Remote / Onsite

Role Summary

We are looking for an experienced Senior EDR (Endpoint Detection & Response) Management Analyst responsible for administering, monitoring, optimizing, and improving enterprise endpoint security platforms. The role will focus on EDR operations, threat detection, incident investigation, endpoint hardening, policy management, threat hunting support, and security platform governance across global environments.

The ideal candidate should possess strong hands-on experience with Microsoft Defender for Endpoint, CrowdStrike Falcon, SentinelOne, Cortex XDR, VMware Carbon Black, and enterprise SOC operations.

Key Responsibilities

EDR Platform Administration

Administer and maintain enterprise EDR platforms.
Configure, deploy, and manage endpoint security agents.
Monitor EDR platform health, coverage, and performance.
Perform agent troubleshooting, upgrades, and patch management.
Ensure endpoint compliance and protection standards are maintained.
Support onboarding of servers, desktops, VDI, and cloud workloads.

Endpoint Security Operations

Monitor endpoint security alerts and investigate suspicious activities.
Validate and respond to malware, ransomware, and advanced threats.
Analyze endpoint telemetry and behavioral indicators.
Support incident response, containment, and remediation activities.
Conduct root cause analysis and provide security recommendations.

Threat Detection & Threat Hunting

Perform proactive threat hunting across enterprise endpoints.
Investigate Indicators of Compromise (IOC) and Indicators of Attack (IOA).
Analyze attack patterns using MITRE ATT&CK framework.
Detect lateral movement, privilege escalation, and persistence techniques.
Collaborate with SOC and Threat Hunting teams during investigations.

Policy & Security Management

Create and maintain endpoint protection policies.
Configure attack surface reduction (ASR) policies.
Manage device control, application control, and exploit protection.
Implement security baselines and endpoint hardening standards.
Reduce security risks through continuous tuning and optimization.

Detection Engineering

Develop custom detection rules and alerting mechanisms.
Tune alerts to minimize false positives.
Create advanced endpoint monitoring use cases.
Support SIEM integration and log correlation.
Improve detection coverage and security visibility.

Incident Response Support

Support cyber security incident investigations.
Perform endpoint containment and isolation activities.
Coordinate malware eradication and recovery efforts.
Assist forensic investigations and evidence collection.
Participate in major incident management and breach investigations.

Reporting & Governance

Develop operational dashboards and KPI reports.
Track endpoint security compliance and coverage.
Support audits, risk assessments, and regulatory requirements.
Maintain SOPs, runbooks, and operational documentation.
Present operational updates to management and stakeholders.

Required Technical Skills

EDR Platforms

Microsoft Defender for Endpoint

CrowdStrike Falcon

SentinelOne

Palo Alto Cortex XDR

VMware Carbon Black

Trend Micro Vision One

Endpoint Security Technologies

Endpoint Protection (EPP)

Endpoint Detection & Response (EDR)

Extended Detection & Response (XDR)

Endpoint Hardening

Device Control

Application Control

Vulnerability Management

Security Operations

Incident Response

Threat Hunting

Malware Analysis

IOC/IOA Investigation

Digital Forensics Fundamentals

MITRE ATT&CK Framework

Operating Systems

Windows Server

Windows 10/11

Linux

macOS

Cloud & Identity Security

Microsoft Entra ID

Azure Security

Defender for Cloud

Conditional Access

PIM/PAM

Identity Protection

Scripting & Automation

PowerShell

Python

KQL

REST APIs

JSON

Preferred Microsoft Security Stack Experience

Microsoft Defender for Endpoint (MDE)

Microsoft Defender XDR

Microsoft Sentinel

Defender for Identity
Defender for Office 365
Defender for Cloud

Microsoft Entra ID

Intune Endpoint Management

Purview DLP

Bachelor's degree in Computer Science, Cyber Security, Information Technology, or related field.
5-10 years of experience in Endpoint Security, SOC Operations, EDR Administration, or Incident Response.
Experience supporting large-scale enterprise environments.
Strong troubleshooting and analytical skills.