Security Architect

Project Role :Security Architect

Project Role Description :Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills :Endpoint Extended Detection and Response

Good to have skills :NAMinimum
3 year(s) of experience is required

Educational Qualification :15 years full time education
Summary:We are seeking a seasoned EDR Subject Matter Expert with over 5 years of hands-on experience in managing enterprise-grade Endpoint Detection and Response (EDR) solutions, particularly Microsoft Defender for Endpoint and CrowdStrike. The ideal candidate should have experience working in dynamic environments across EDR platforms including EDR deployment on Windows servers, Linux servers, Windows workstations, macOS, iOS, and Android devices.
Roles & Responsibilities:--Ensure 100% EDR Compliance by actively managing agent deployment, AV prevention policy enforcement, and coverage across all platforms.-Ensure MDE is in Passive (EDR in Block Mode ) where applicable and CrowdStrike as the Primary AV solution-Monitor and fine-tune alerts proactively to reduce noise and enhance detection accuracy. Handle incoming requests and incidents through ServiceNow (SNOW) or Jira for finetuning and IOC additions.-Maintain agent/platform health, ensuring that agents and security intelligence (AV signatures) are consistently updated and functioning optimally.-Develop custom detection policies using KQL (for MDE) and IOAs (for CrowdStrike) to identify threats beyond standard out-of-the-box detections.-Investigate and remediate performance issues caused by EDR agents as identified through ticketing systems (SNOW/JIRA). Tune configurations to reduce false positives, optimize resource usage (e.g., CPU/memory for MsMpEng.exe, Falcon sensor), and ensure high detection efficacy. Professional & Technical Skills:

-Track and remediate vulnerabilities related to EDR components; coordinate with patching teams to ensure timely mitigation and compliance.-Collaborate with the team to run attack simulations using tools like AttackIQ, validating MDE and CrowdStrikes detection and prevention capabilities against real-world scenarios.-Document and maintain SOPs and knowledge base articles for all EDR-related operations, ensuring standardized processes and knowledge sharing.-Provide expert guidance and training on MDE/CrowdStrike tools to SOC and internal customers.-Support Weekend Move Events and Micro Segmentation activities (On demand)-Build dashboards/reports as per business requirements and should be able to automate repetitive tasks using PowerShell/Shell scripts.
Additional Information:- The candidate should have minimum 3 years of experience in Endpoint Extended Detection and Response.- This position is based at our Bengaluru office.- A 15 years full time education is required. Qualification 
15 years full time education