Summary
Paramount Computer Systems is seeking an L2 Security Engineer in Dubai focused on endpoint protection and EDR, with vulnerability management as a secondary responsibility. The role includes investigating security incidents, administering and tuning EDR platforms and policies, threat hunting, malware analysis, and coordinating vulnerability remediation. Applicants should have at least five years of IT security operations experience, including three years in EDR and endpoint security, and knowledge of Windows, Linux, macOS, Active Directory, and cloud environments. CISSP, CEH, GCIH, or vendor-specific EDR certifications are noted.
The posting
As published on paramountassure.com. Pulled from the employer's site and shown as they wrote it.
An L2 Engineer for Endpoint Protection and EDR (Endpoint Detection and Response) manages advanced security incidents, configures high-level security tools, and resolves complex endpoint threats.
Core Responsibilities (Primary Skill: Endpoint Protection & EDR)
- Incident Response: Investigate high-severity alerts and lead containment actions for advanced security breaches.
- Platform Administration: Manage, tune, and maintain enterprise EDR and endpoint protection agents (such as TrendMicro DSM, Symantec EPP, CrowdStrike EDR)
- Policy Management: Design, test, and deploy strict security policies, exclusion rules, enhancing the security posture and hardening guidelines across global endpoints.
- Threat Hunting: Proactively search environment telemetry for hidden adversary behaviours and indicators of compromise (IoCs).
- Malware Analysis: Inspects suspicious files, memory dumps, or scripts to understand attacker methods and build defenses.
- Root Cause Analysis: Perform deep-dive forensic analysis on compromised hosts and write comprehensive post-incident reports.
- Vendor Escalation: Partner with tier-4 vendor support to resolve software bugs, driver conflicts, or complex platform issues.
Policy & Safe Management
- Design safes: Establish safe structures, retention periods, and permissions.
- Tune policies: Optimize Master Policy rules and platform settings.
- Manage Endpoints: Onboard enforce EPP & EDR policies to meet compliance posture
- Enhance Security Posture : Ensure on Security Policy enforcement and effectiveness
Secondary Responsibilities (Secondary Skill: Vulnerability Management)
- Vulnerability Scanning: Schedule and oversee network and host-based vulnerability assessments using tools like Tenable, Qualys, or Rapid7.
- Risk Prioritization: Analyze vulnerability scan reports to prioritize remediation based on active threats and business impact.
- Remediation Tracking: Collaborate with IT and system administration teams to ensure timely patching of critical vulnerabilities.
- Compliance Reporting: Generate security posture metrics and compliance dashboards for leadership teams.
Required Qualifications
- Experience: 5+ years in IT security operations, with at least 3 years focused specifically on EDR and endpoint security.
- Certifications: Industry credentials like CISSP, CEH, GCIH, or vendor-specific EDR certifications.
- Technical Knowledge: Deep understanding of Windows, Linux, and macOS operating systems, Active Directory, and cloud environments.