Cyber Security Engineer

% Time

Core Responsibilities

Measures for Core Responsibilities

40

Administer and Maintain EDR Tools

• Tune detection rules to reduce false positives and improve threat visibility for each covered locality.
• Ensure asset inventory is accurate and up to date for each covered locality.
• Regularly update the EDR platform and agents to the latest versions.
• Review and adjust security policies.
• Conduct health checks to ensure the EDR system is functioning properly.
• Investigate and remediate unexcepted agent behavior
• Ensure that Integrations are working as required and troubleshoot when issues are identified

40

Administer and Maintain Vulnerability Management System

• Maintain and update the vulnerability management platform and agents
• Conduct health checks to ensure the VMS system is functioning properly.
• Tune scan policies to reduce false positives and improve accuracy for each covered locality
• Ensure asset inventory is accurate and up to date for each covered locality
• Configure and schedule scans for each covered locality.
• Investigate and remediate unexpected agent behavior

·       Ensure that integrations are working as required and troubleshoot when issues are identified

20

General Support

·      Respond to and resolve customer inquiries and issues submitted through the ticketing system and SOC

• Maintain and update the Remote Monitoring and Management platform and agents

·      Accurately document customer interactions, troubleshooting steps, and resolutions

·      Escalate complex or unresolved issues as needed

·      Monitor ticket queues to ensure service level agreements (SLAs) are met and follow up with customers as needed