<h1><strong>About Us</strong></h1><div><br></div><div><span style="color: rgba(0, 0, 0, 0.9); font-size: 14px;">Incorporated in 2014, Intuitive Apps Inc. has been deeply rooted in a legacy of transforming the industry and the way people experience technology consulting, and we’re committed to deliver a seamless, personalized experience to save costs, bring efficiencies, and making them robust.</span></div><div><br></div><div><span style="color: rgba(0, 0, 0, 0.9); font-size: 14px;">We are committed to make IT Consulting experience simpler, better and more affordable for businesses and their clients through our innovative business processes, industry best practices, continuously improving to run and change their business processes.</span></div><div><br></div>

Intuitive Apps

<div><strong>Hello Everyone,</strong></div><div><br></div><div>We're actively hiring the candidates having experience in Cyber Security with SIEM, SOAR, SOC and any EDR tool such as (Crowdstrike Falcon, Symantec, Carbon Black, SentinelOne, Fireye, Microsoft Defender, Bitdefender or any other EDR)</div><div><br></div><div><strong>Apply Now! Share you resume at inshita@intuitiveapps.com</strong></div><div><br></div><h1>Job Description-</h1><div><span style="color: rgb(88, 88, 88);">The candidate should have a team-oriented, client-facing mindset with proven experience conducting EDR infrastructure deployments. Use deep insights to identify, recommend and execute resolution for malware and other EDR-detected incidents while helping to develop and execute methodologies for EDR deployment, feature enablement and technical integration in a SOC.</span></div><div>&nbsp;</div><div style="text-align: justify;"><span style="color: rgb(62, 65, 69);">As an Endpoint Detection and Response (EDR) SME, candidate will play a key role in supporting the design, deployment, configuration, optimization, and operation of a large-scale Endpoint Detection and Response (EDR) deployment solution or similar security products, across multiple geographies.</span></div><div>&nbsp;</div><div><span style="color: rgb(0, 0, 40);">Candidate shall be responsible for managing day to day operations of Security Device Management SIEM, incident response, threat hunting, Use case engineering, SOC analyst, device integration with SIEM. Also Responsible for identifying, reporting and tracking system vulnerabilities within corporate, commercial and federal assets ensuring the integrity of the environment.</span></div><div>&nbsp;</div><h1>Qualifications</h1><div><strong>&nbsp;</strong></div><ul><li>Experience in a cybersecurity role in a large size enterprise</li><li>Excellent analytical and problem-solving skills with attention to detail</li><li>Experience with deployment of an EDR solution in a large customer environment, including 15k+ endpoints</li><li>Knowledge of intrusion detection methodologies and techniques for detecting host and network- based intrusions</li><li>Experience with providing status reports, including metrics and KPIs, for team activities</li><li>Knowledge of network security architecture concepts including topology, protocols, components, and principles</li><li>Knowledge of various enterprise operating system (OS) configurations and management tools for use during deployment, configuration, and management of EDR solutions</li><li>3+ years of experience with deployment, configuration, or maintenance of supporting enterprise EDR solutions, including Carbon Black EDR, CrowdStrike Falcon (is a plus), SentinelOne, FireEye HX, McAfee, Tanium, etc.</li><li>3+ years of experience with performing systems administration, including basic troubleshooting and installation, monitoring system performance or availability, performing security upgrades, and optimizing solution configurations to meet the needs of operational users</li><li>3+ years of experience in EDR and/or AV; previous work in malware and attack analysis, research, investigation, and response role by performing forensic analysis of logs and packet captures to identify malicious artifacts</li><li>2+ years of experience in working with a Security Operations Center (SOC) environment, leveraging EDR tools to support incident response, vulnerability scanning, threat hunting, network monitoring and log management, and compliance management activities</li><li>+3 years of experience with a solid understanding of the TCP/IP protocol suite, security</li><li>architecture, and common TTP’s (tactics, techniques, and procedures) used by threat actors</li><li>Experience in performing and analyzing both log and packet data to perform incident response in a SIEM environment (Splunk, NetWitness, Azure Sentinel, etc.) and identify potential compromises to customer networks.</li><li>Knowledge of federal information security policies, standards, procedures, directives, frameworks, federal security authorizations, assessment, and risk management processes for enterprise systems</li><li>Strong verbal/written communication and interpersonal skills are required to document and communicate findings, escalate critical incidents, and interact with customers</li><li>Experience using ticketing systems for tracking (WebHelpDesk, Remedy, OpsConsole, ServiceNow, etc.)</li><li>Candidate must possess, at least one, applicable professional/technical certifications, such as Security +, C|EH, OSCP, GCIH, CISSP, GPEN, GWAPT, GISEC, CISM, CrowdStrike Certified Falcon Hunter, Responder, Administrator, or CISA</li><li>Experience in Automation orchestration technologies: such as SOAR, Ansible, Puppet, Chef</li><li>Experience in Coding languages: such as Python, PowerShell, Perl, C/C++, Java, etc.</li><li>Unix/Linux RedHat windows Administration</li></ul><div>&nbsp;</div><h1>Skills Required</h1><div><strong>&nbsp;</strong></div><ul><li><span style="color: rgb(88, 88, 88);">Project and delivery management experience 3+ years EDR administration (CrowdStrike Falcon, VMware Carbon Black, Palo Alto Network Cortex XDR, Microsoft Windows Defender, Cylance, Tanium etc.)</span></li><li><span style="color: rgb(88, 88, 88);">3 + years of working with EDR tools performing requirements gathering, deployment, configuration, and conducting threat hunting</span></li><li><span style="color: rgb(88, 88, 88);">5+ years working with operational information security disciplines (e.g. incident response, security infrastructure management, or monitoring services)</span></li><li><span style="color: rgb(88, 88, 88);">3+ years security tool engineering and administration (e.g. NGAV, EPP, EDR, SIEM, SOAR, UEBA, Deception, Attack Surface Management, etc.)</span></li><li><span style="color: rgb(88, 88, 88);">Some of the following EDR experience- Agent deployment, health check and coverage sustainability</span></li></ul><ol><li><span style="color: rgb(88, 88, 88);">-&nbsp;Threat Hunting</span></li><li><span style="color: rgb(88, 88, 88);">-&nbsp;Systems integration</span></li><li><span style="color: rgb(88, 88, 88);">-&nbsp;Comparing vendor functionality</span></li><li><span style="color: rgb(88, 88, 88);">-&nbsp;Mapping EDR capabilities to threat scenarios</span></li><li><span style="color: rgb(88, 88, 88);">-&nbsp;Deploying EDR in a multi-agent (i.e. AV, NG AV) environments</span></li><li><span style="color: rgb(88, 88, 88);">-&nbsp;Deep understanding and proven experience in Cybersecurity Operations (Monitoring, Detection, Incident Response, Forensics)</span></li></ol><div>&nbsp;</div><div><strong>Personal skills:</strong></div><ul><li>Good Team player</li><li>Possess Positive and learning attitude</li><li>Good Verbal and Written communication skills</li><li>Sense of Ownership, Priorities and Autonomous</li><li>Ability to travel up to 50% of the time</li></ul><div>&nbsp;</div><div>&nbsp;</div><h1>Roles &amp; Responsibilities</h1><div><strong>&nbsp;</strong></div><div><span style="color: rgb(31, 34, 41);">As an Endpoint Detection and Response (EDR) Tools Engineer, the candidate will be part of the Cyber security team responsible for deploying, operating, and maintaining the global EDR platform. The candidate will provide support for EDR tools in the environment. The candidate must be able to communicate with the Security Operations and Incident Response teams to identify adjustments and modifications to be made to the EDR toolset. As in the most senior EDR tools engineer position, the candidate must be able to lead and by example to drive progress forward.</span></div><div>&nbsp;</div><ul><li><span style="color: rgb(31, 34, 41);">Lead and oversee deployment, operation, and maintenance of the global EDR platform</span></li><li><span style="color: rgb(31, 34, 41);">Provide support response to other security teams in respect to the EDR platform</span></li><li><span style="color: rgb(31, 34, 41);">Identify adjustments and modifications for configuration</span></li><li><span style="color: rgb(31, 34, 41);">Identify new opportunities for tools to incorporate into the EDR platform</span></li><li>work with cross functional teams to identify the right mix of processes and technology to implement solutions to support the needs of the internal and external customers.</li><li>Continually work on the optimization of EDR and integrated solutions, including refinement data produced, development of automated workflows or playbooks, and integration of the EDR data with complementary security solutions, including SIEM, SOAR, etc.</li><li>Establishing technical processes and tools focused on the incident response lifecycle. Preparation; Detection and Analysis; Containment, Eradication, and Recovery; and Post-Event Activity.</li><li>Work to integrate cybersecurity data using enterprise or custom tools data aggregation and analysis tools, including Splunk and similar complementary security solutions.</li><li>Manage projects to completion both individually and in a group as well as mentoring others and orchestrating team efforts for problem solving</li><li>Serve as an escalation point to triage and remediate security events in a SOC environment by leveraging data collected from security solutions.</li><li>Provide support in an operations and maintenance role, including ticket work information updates, issue responses, and remediation.</li><li>Provide content on deliverables, including written reports and technical documents, SOPs and configuration guides, and training and briefing materials</li><li>Collaborate and consult with peers, colleagues, and managers, etc. to resolve issues and achieve goals</li><li><span style="color: rgb(0, 0, 40);">General SIEM monitoring, analysis, content development, and maintenance.</span></li><li><span style="color: rgb(0, 0, 40);">Daily security activities related to the protection of corporate and other federal assets including scanning tools and ticketing systems documenting the identification and remediation process for identified system flaws</span></li><li><span style="color: rgb(0, 0, 40);">Provide information to system owners of flaws identified within that group's responsible systems.</span></li><li><span style="color: rgb(0, 0, 40);">Assist in risk assessment duties including reporting and oversight of remediation efforts</span></li><li><span style="color: rgb(0, 0, 40);">Research, analysis, and response for alerts; including log retrieval and documentation.</span></li><li><span style="color: rgb(0, 0, 40);">Conduct analysis of network traffic and host activity across a wide array of technologies and platforms.</span></li><li><span style="color: rgb(0, 0, 40);">Assist in incident response activities such as host triage and retrieval, malware analysis, remote system analysis, end-user interviews, and remediation efforts.</span></li><li><span style="color: rgb(0, 0, 40);">Enterprise-level experience managing the remediation of vulnerabilities in two or more of the following areas:</span></li><li><span style="color: rgb(0, 0, 40);">Server Operating Systems (Windows Server, Red Hat, CentOS)</span></li><li><span style="color: rgb(0, 0, 40);">Network (Cisco, Fortinet, Palo Alto, F5, McAfee)</span></li><li><span style="color: rgb(0, 0, 40);">Storage (NetApp, CleverSafe)</span></li><li><span style="color: rgb(0, 0, 40);">Manage multiple projects with various priority levels and time lines from start to finish</span></li><li><span style="color: rgb(0, 0, 40);">Develop and maintain accurate documentation for internal procedures and services</span></li><li><span style="color: rgb(0, 0, 40);">Maintain knowledge of outstanding vulnerability management issues and ensure remediation timelines are completed by required guidelines</span></li><li><span style="color: rgb(0, 0, 40);">Thorough understanding of how to calculate CVSS v2 and v3 adjusted scores</span></li><li><span style="color: rgb(0, 0, 40);">Must collaborate with other departments to resolve complex issues and be detail oriented</span></li></ul>