Endpoint Detection & Response (EDR)_3377

About the role

Endpoint Detection & Response (EDR)_3377 at Allianz. Work with red teams to simulate attacks and see if their detection mechanisms work detection platform to analyse EDR telemetry, alerts.

What you'll do

• Work with red teams to simulate attacks and see if their detection mechanisms work detection platform to analyse EDR telemetry, alerts
• Detect campaigns and attacks against your infrastructure, and identify the actors responsible
• Improve and assist in automating the detection of incidents by your SOC
• Detect existing APTs in the wild of our systems
• Improve your tools (SIEMs, FWs, IDS / IPS, WAFs, EDR) for IOC detection, avoiding false positives

What you need

• 5–9 yrs of experience
• EDR
• Incident response
• SIEM
• Network security
• DLP
• Python
• Any graduate

Good to have

• Splunk
• Azure
• AWS
• GCP
• SQL
• Power BI