Tanium Analyst | 4 to 6 years | Bengaluru / Mumbai

Tanium Analyst | 4 to 6 years | Bengaluru / Mumbai

SME will be responsible for the configuration, management, monitoring, analysis, and threat hunting related to our endpoint security suite, which includes CrowdStrike Falcon, Microsoft Defender Antivirus (ATP), Microsoft Defender Firewall, Microsoft BitLocker, and Tanium Enforce. This role requires a deep understanding of endpoint security best practices and the ability to translate them into robust endpoint protection strategies.
Responsibilities:
Configuration and Management:
o Deep dive into the functionalities of CrowdStrike Falcon, Microsoft Defender Antivirus, Microsoft Defender Firewall, and Microsoft BitLocker.
o Collaborate with security engineers to configure and optimize these tools for maximum protection against evolving threats.
o Leverage Tanium Enforce to centrally manage and enforce endpoint security policies across the organization's devices.
o Stay updated on the latest threat intelligence and adjust configurations proactively to mitigate emerging risks.
Monitoring and Analysis:
o Proactively monitor endpoint security alerts from CrowdStrike Falcon and Microsoft Defender Antivirus, identifying potential threats and incidents.
o Investigate security incidents related to endpoints, working with internal teams to understand the root cause, remediate the issue, and prevent future occurrences.
o Analyze endpoint security data to identify trends, suspicious activities, and potential vulnerabilities.
o Generate reports and provide insights into the effectiveness of your endpoint security posture.
Threat Hunting:
o Utilize advanced threat hunting techniques within CrowdStrike Falcon to proactively identify and respond to hidden threats within the network.
o Leverage Tanium Enforce for large-scale endpoint investigations and threat hunting activities.
o Collaborate with security analysts to develop and implement effective threat hunting strategies.
Collaboration and Communication:
o Work closely with security engineers, system administrators, and IT operations to ensure seamless integration of endpoint security solutions with existing infrastructure.
o Participate in security awareness training programs to educate employees on endpoint security best practices.
o Maintain clear and concise documentation of endpoint security configurations, policies, and procedures for knowledge sharing and future reference.

Primary Skills

Any EDR Tool.

Configuration and Management

Monitoring and Analysis

Threat Hunting

Secondary Skills

Scripting languages (Python, PowerShell)