Job Role: Endpoint Detection and Threat Hunting Analyst

Location: Downey, CA (Remote)

Duration: 12 Months Contract

Additional Skills Required:

Possess knowledge with Endpoint and Data Protection products such as CrowdStrike Falcon Endpoint Security, Falcon SaaS Security, Falcon Exposure Management, Falcon Data Protection, Falcon Recon, Fusion SOAR Ability to generate reports using APIs. Demonstrate mastery in operating and optimizing the Falcon platform. Possess knowledge of parent and child CIDs in the CrowdStrike environment. Ability to generate reports using APIs as a CrowdStrike Falcon administrator. Demonstrate mastery in operating and optimizing the Falcon platform. Demonstrate ability to use Endpoint and Data Protection products for threat hunting in the environment. Possess knowledge with Axonius Possess knowledge in XDR platforms (Secureworks) Possess knowledge in Cisco SecureWorkload Possess knowledge in SIEM tools for reporting and reviewing of logs (Elastic) Possess knowledge in API integrations and configuration Possess knowledge in creating data pipelines using Cribl.

Additional Experience Required:

Minimum one (1) year of working experience within the last 2 years in building data pipelines using Cribl.
Minimum three (3) years of working experience within the last 4 years in performing workflow analysis using Cisco SecureWorkload/Tetration.
Minimum three (3) years of working experience within the last 4 years in Incident response in an enterprise environment
Minimum three (3) years of experience within the last 4 years configuring telemetry API integrations to various SIEM and XDR tools
Minimum six (6) years of working experience within the last 8 years serving as an organization’s subject matter expert responsible for the management of CrowdStrike Falcon and SecureWorks
Minimum six (6) years of working experience within the last 8 years administering Endpoint Detection and Response platform for Prevention Policies, creating IOA exclusions, USB Device Control, Firewall, and creating Fusion SOAR workflows.
Minimum six (6) years of working experience within the last 8 years with malware, threat intelligence and/or sandbox analysis
Minimum four (4) years of working experience with programming or scripting languages such as PowerShell, Python and Bash.
Minimum five (5) years of working experience with virtualization/VDI technologies and cloud SaaS solutions.
Minimum two (2) years of experience in API integrations for automation.

Pyramid Technology Solutions

Latest Jobs

Threat Intelligence Analyst