Cybersecurity Engineer 3 - TWO ROLES

% Time

Core Responsibilities

Measures for Core Responsibilities

40

Administer and Maintain EDR Tools

• Tune detection rules to reduce false positives and improve threat visibility for each covered locality.
• Ensure asset inventory is accurate and up to date for each covered locality.
• Regularly update the EDR platform and agents to the latest versions.
• Review and adjust security policies.
• Conduct health checks to ensure the EDR system is functioning properly.
• Investigate and remediate unexcepted agent behavior
• Ensure that Integrations are working as required and troubleshoot when issues are identified

40

Administer and Maintain Vulnerability Management System

• Maintain and update the vulnerability management platform and agents
• Conduct health checks to ensure the VMS system is functioning properly.
• Tune scan policies to reduce false positives and improve accuracy for each covered locality
• Ensure asset inventory is accurate and up to date for each covered locality
• Configure and schedule scans for each covered locality.
• Investigate and remediate unexpected agent behavior

Ensure that integrations are working as required and troubleshoot when issues are identified

20

General Support

Respond to and resolve customer inquiries and issues submitted through the ticketing system and SOC

• Maintain and update the Remote Monitoring and Management platform and agents

Accurately document customer interactions, troubleshooting steps, and resolutions

Escalate complex or unresolved issues as needed

Monitor ticket queues to ensure service level agreements (SLAs) are met and follow up with customers as needed