SecOps Lead, Security Systems

Job Description

We are seeking a Security Operations Engineer with expertise in Endpoint Security (EDR) solutions such as CrowdStrike, Trend Micro , and similar platforms. The ideal candidate will be responsible for the administration, maintenance, and optimization of endpoint security tools across Windows, Linux, and Mac environments. This role is part of a Global Security Incident Response Team (GSIRT) , requiring strong analytical skills, troubleshooting capabilities, and excellent communication (written & verbal in English). Roles and Responsibilities Endpoint Security Administration: Deploy, configure, and manage Endpoint Detection & Response (EDR) solutions such as CrowdStrike and Trend Micro. Monitor security alerts, analyze threats, and respond to incidents efficiently. Ensure endpoint security tools are updated, patched, and optimized. Compliance & Best Practices: Ensure compliance with organizational security policies and SLA’s. Keep track of the KPI metrices and alignment with organizational goals. Provide recommendations for enhancing endpoint security posture. Collaboration & Communication: Work with global teams to improve security processes and response mechanisms. Document procedures, knowledge base, incident reports, and security best practices. Required Skills and Qualifications: A bachelor's degree in Computer Science, Engineering, Information Technology, or a related field is required. 4 to 8 years of experience in information security with a focus on endpoint security and incident response. Strong hands-on experience with EDR solutions (e.g., CrowdStrike, Trend Micro, Microsoft Defender ATP, SentinelOne, etc.). Proficiency in Windows, Linux, and Mac security administration. Scripting knowledge in PowerShell, Shell scripting, or Python (bonus). Experience in security monitoring, threat hunting, and incident handling. Strong analytical, troubleshooting, and problem-solving skills. Excellent communication skills – written & verbal English Preferred Qualifications: Experience with cloud platforms (e.g., AWS, Azure, GCP) in a security context. Experience with Splunk, cloud platforms, or relevant security technologies.