U
EDR Specialist (Trellix AV)
Accepting applicationsUST · Trivandrum, Kerala, India
Full-Time Mid_senior SOC
Posted
19h ago
Category
Design
Experience
Mid_senior
Country
India
Role
Role description
EDR Specialist (Multi-Platform EDR/XDR)
Experience
3–6 Years | Full-Time
Role Summary
We are seeking an experienced EDR Specialist with strong hands-on expertise in managing and operating multi-vendor EDR/XDR platforms. The role focuses on platform administration, operational excellence, and enabling SOC teams to effectively detect, investigate, and respond to advanced threats across enterprise environments.
The candidate should have hands-on exposure to tools such as Trellix AV, CrowdStrike, SentinelOne and Microsoft Defender for Endpoint (MDE).
Key Responsibilities
EDR/XDR Platform Administration (Primary – ~70–80%)
Administer and manage EDR platforms Trellix AV, CrowdStrike, SentinelOne and Microsoft Defender for Endpoint (MDE).
Manage full endpoint agent lifecycle: deployment, upgrades, troubleshooting, and decommissioning
Configure endpoint security policies, exclusions, prevention controls, and response mechanisms
Perform proactive threat hunting using advanced detection techniques
Build and tune custom detection rules to enhance out-of-the-box capabilities
Manage RBAC, user access, device grouping, tagging, and organizational hierarchy
Perform continuous agent health monitoring and ensure optimal endpoint coverage
Fine-tune s to reduce false positives and minimize fatigue
Trellix EDR-Specific Responsibilities
Administer and support Trellix AV / EPO server and Agent handlers
Operational & Incident Support
Execute response actions such as host isolation, process termination, and file quarantine.
Handle P1/P2 incident escalations and provide 24x7 operational support where required.
Coordinate with IT, endpoint, and infrastructure teams for remediation activities
Maintain incident documentation, evidence handling, and audit trails
Reporting, Governance & Stakeholder Management
Develop executive and operational reports (daily/weekly/monthly).
Present insights and recommendations to stakeholders and customers
Support audits with configuration evidence and operational documentation.
Coordinate with IT, endpoint, and infrastructure teams for remediation activities
Maintain incident documentation, evidence handling, and audit trails
Required Skills & Experience
3–6 years of hands-on experience in EDR/XDR platform administration
Strong expertise in at least two tools: Trellix AV (mandatory), CrowdStrike, SentinelOne, MDE.
Experience in agent deployment, troubleshooting, and platform tuning.
Strong knowledge of endpoint OS: Windows, Linux, macOS.
Experience with SIEM/SOC workflows and integrations
Strong troubleshooting, communication, and stakeholder management skills
Skills
endpoint detection and response,splunk,extended detection and response,incident response,
Show more Show less
Role description
EDR Specialist (Multi-Platform EDR/XDR)
Experience
3–6 Years | Full-Time
Role Summary
We are seeking an experienced EDR Specialist with strong hands-on expertise in managing and operating multi-vendor EDR/XDR platforms. The role focuses on platform administration, operational excellence, and enabling SOC teams to effectively detect, investigate, and respond to advanced threats across enterprise environments.
The candidate should have hands-on exposure to tools such as Trellix AV, CrowdStrike, SentinelOne and Microsoft Defender for Endpoint (MDE).
Key Responsibilities
EDR/XDR Platform Administration (Primary – ~70–80%)
Administer and manage EDR platforms Trellix AV, CrowdStrike, SentinelOne and Microsoft Defender for Endpoint (MDE).
Manage full endpoint agent lifecycle: deployment, upgrades, troubleshooting, and decommissioning
Configure endpoint security policies, exclusions, prevention controls, and response mechanisms
Perform proactive threat hunting using advanced detection techniques
Build and tune custom detection rules to enhance out-of-the-box capabilities
Manage RBAC, user access, device grouping, tagging, and organizational hierarchy
Perform continuous agent health monitoring and ensure optimal endpoint coverage
Fine-tune s to reduce false positives and minimize fatigue
Trellix EDR-Specific Responsibilities
Administer and support Trellix AV / EPO server and Agent handlers
Operational & Incident Support
Execute response actions such as host isolation, process termination, and file quarantine.
Handle P1/P2 incident escalations and provide 24x7 operational support where required.
Coordinate with IT, endpoint, and infrastructure teams for remediation activities
Maintain incident documentation, evidence handling, and audit trails
Reporting, Governance & Stakeholder Management
Develop executive and operational reports (daily/weekly/monthly).
Present insights and recommendations to stakeholders and customers
Support audits with configuration evidence and operational documentation.
Coordinate with IT, endpoint, and infrastructure teams for remediation activities
Maintain incident documentation, evidence handling, and audit trails
Required Skills & Experience
3–6 years of hands-on experience in EDR/XDR platform administration
Strong expertise in at least two tools: Trellix AV (mandatory), CrowdStrike, SentinelOne, MDE.
Experience in agent deployment, troubleshooting, and platform tuning.
Strong knowledge of endpoint OS: Windows, Linux, macOS.
Experience with SIEM/SOC workflows and integrations
Strong troubleshooting, communication, and stakeholder management skills
Skills
endpoint detection and response,splunk,extended detection and response,incident response,
Show more Show less