EDR Specialist
NTT DATA
NTT DATA
Join NTT DATA, a global leader in business and technology services, and contribute to our mission of accelerating client success and positively impacting society through responsible innovation. As a forward-thinking organization, we seek passionate individuals to grow with us.
This role involves validating antivirus strategies across the IT environment, ensuring adherence to security policies and procedures. Successful candidates will manage the complete installation of supported devices, including implementation, testing, reporting, alerting, and training operational support resources.
Key responsibilities include creating, modifying, and testing approved changes to supported devices based on client requirements, and verifying system status and health. You will maintain up-to-date standard operating procedures and documentation.
Experience with the design, architecture, and implementation of Endpoint and Email EDR services is essential. This includes in-depth knowledge of implementing and installing EDR technologies, managing EDR projects from installation to troubleshooting, and configuring tasks, policies, and scan exclusions.
Daily activities involve monitoring and remediation, evaluating and deconstructing malware using various tools, and resolving client issues through appropriate corrective actions or escalations. You will utilize ticketing systems and adhere to SLAs, performing shift-based reporting, monitoring, and turnover logs.
Furthermore, you'll evaluate security events using packet analysis and understanding exploits/vulnerabilities. Effective communication of technical information to clients and internal teams is crucial, as is participating in knowledge sharing and developing efficient customer solutions.
A minimum of eight to ten years of experience is required in End-point Detection and Response (EDR).
Direct experience with specific EDR solutions is mandatory, including Sentinelone, Crowdstrike, Microsoft Defender, Proofpoint EDR, or Netskope EDR.
While not strictly required, vendor certifications from Netskope Data Loss Prevention (EDR), Sentinelone, Crowdstrike, or Microsoft Defender are considered advantageous. Other relevant vendor certifications, such as from Proofpoint, are also beneficial.
NTT DATA
IT Consulting