L2 Operations L2 Lead � Malware Tools

Process
End-to-end incident management, from L1/L1.5 escalation to closure.
Report security issues promptly with recommended actions.
Install, update and maintain anti-virus and endpoint protection on servers.
Manage endpoint protection consoles, patching and upgrades.
Keep ServiceNow tickets current, with clear resolution and closure notes.
Join RCA reviews. Update SOPs and knowledge-base articles.
Use incident trends to tune alerts and reduce repeat incidents.
Follow client security standards and guidelines.
Work with DLP, Hosting, Network Security and IDAM on cross-tower issues.
Tools
CrowdStrike
ServiceNow
SIEM(Splunk)/ SOAR tools
DataDog
Technologies
Endpoint protection: anti-virus and EDR
Defender
Malware detection and investigation
Endpoint patching and software upgrades
Windows operating systems
Python or PowerShell scripting
Experience
10+ years of L2 endpoint security experience
24x7 support environment
CrowdStrike (or any other EDR solution)and agent troubleshooting
Alert triage, risk rating and escalation
ITSM incident, problem and change processes
Malware investigation and containment
Clear written and spoken English
CrowdStrike Falcon Administrator
Microsoft SC-200
CompTIA Security+