Skip to content
e2eHiringFor employers
← Back to jobs

WiproEmployer profile

CrowdStrike EDR

Location not specified · Experience not specified

Experience
Experience not specified
Salary
Not disclosed
Location
Location not specified
Work mode
Not specified
Job type
Full-time
Apply by
Closing date not listed
Posted
14 May 30

About this role

Cyber Security Enterprise Tools & Platforms Solutions Engineer

Job Description:

BNY Mellon is seeking a motivated, ambitious, eager, inquisitive, technical, organized, and high energy engineer for a unique opportunity to be a part of both Cyber Security and Reliability Engineering to design, deploy, and operate a sustainable and reliable large scale Cyber Security Tools Platforms and ensure that they are ensuring control completeness for the firm.

Cyber Security is the state or process of mitigating risk and protecting and recovering networks, devices, systems, and programs from any type of danger to an organizations' information which may lead to unauthorized access to sensitive data amongst other risks and threats.

Reliability Engineering is an engineering discipline that combines software and systems engineering to build and run large-scale, massively distributed, fault-tolerant systems. Reliability Engineering ensures that a company?s services ? both internally critical and externally-visible systems have reliability and uptime appropriate to users' needs.

The Cyber Security Tools and Platforms Solutions Engineer will be a combination of both functions.

Responsibilities:

  • Analyze problems, evaluate technical issues, test, maintain, modify, integrate, monitor, and automate large scale enterprise cyber security technologies.
  • Analysis of Software Rules engines, logic, configurations, scheduled tasks, and automation.
  • Responsible for design, development, testing and implementation of Enterprise scale cyber security solutions that will interact with multiple third party applications.
  • Incident management and post-mortem culture.
  • Troubleshooting challenging and complex issues with data movement/availability/lineage/handling.
  • Present technical concepts and create technical documentation.
  • Being involved in system design, platform management, and capacity planning.
  • Building sustainable production systems by eliminating unnecessary complexity and toil.
  • Solving complex problems by a process of elimination, creating bespoke tooling where appropriate.
  • Implement config management to large platforms and Devops lifecycle tools
  • Ensure stability in large scale interconnected global platforms
  • Data Platform infrastructure management
  • Perform Changes via Change Management process on large scale infrastructure.
  • Assisting users with platform usage and use cases
  • Knowledge/Experience with Network Protocols /Devices / TCP/IP Stack

Required Technical / Professional Expertise:

  • BS degree in Computer Science or related technical field involving coding and / or systems engineering
  • Proficiency in one or more of the following: Python, Go, C, C++, Java, Perl, Ruby, powershell, or any other non-shell script language
  • Administration experience with operating systems (ie linux, windows server)
  • Managing and deploying Large Scale Vendor Software
  • Having the mindset of Engineering, automation, and maximizing efficiency
  • Proficiency in data reporting/mining with query or search languages such as SQL, Splunk SPL, etc
  • Experience with UNIX operating systems internals and networking
  • Familiarity with various UNIX performance and system tools (e.g., strace, iostat, nmap, free, top, tcpdump , grep, awk, sed , etc?)
  • Experience in troubleshooting large scale distributed systems.
  • Large Scale Agent Management and automation of the same
  • Experience working with and/or troubleshooting Data Lineage workflows
  • Partnering with Cyber Operations (ie SOC, IR, etc) and Technology Services (ie Admins, Networks, etc) teams to integrate value of cyber technologies
  • Working within Production Change management discipline
  • Working with metrics and analysis of data in different formats
  • Familiarity with Cloud Infrastructure and PAAS (ie Azure, AWS, GCP)
  • Software product evaluations

Preferred Experience:

  • Understanding and integrating new technologies such as cloud infrastructure Integrating products using APIs
  • Experience with: Endpoint Detection and Response (EDR) (ie MS Defender technology and API thereof), Vulnerability Scanning Solutions (VM) (ie Qualys Nessus), Cloud Security Inventory and Scanning, Windows and Unix Platform Security Hardening, SIEM Back-End Systems Administration/Tuning/Policy (ie Splunk/Sentinel/Chronicle) , Network Packet Capture and intelligence solutions, Isolated Browsing and/or Browser Control Solutions
  • Operating System Hardening (Windows/Linux/Mac OS)
  • Networking Stack/Layers and troubleshooting
  • SW configuration framework (e.g., ansible, chef, salt), and Devops lifecycle tools (e.g., git, subversion, artifactory)
  • Experience with logging systems like Splunk, ELK, syslog , QRadar, LogRhythm
  • Debugging / optimizing code
  • Modern development practices. A strong preference for CI / CD / Devops techniques
  • Containerization technologies.
  • Solid understanding of Risk culture
  • Solid understanding of Systems Controls and Risk Reduction techniques
  • Experience with other Cyber Security Tools
  • Experience in managing a large scale Splunk environment is a distinct advantage

Qualys (1), Netwitness, Stealthwatch

SIEM - Security Information & Event Management

VM - vulnerability management or Scanning

EDR (1)- Endpoint Detection & Response

Network Security

  • SIEM - Security Information & Event Management
  • Splunk ES

CrowdStrike EDR

  • VM - vulnerability management or Scanning
  • Qualys
  • Data Theorem
  • Wiz.io
  • Virus Total
  • FireMon (Lumeta)
  • EDR - Endpoint Detection & Response
  • Windows Defender
  • Crowdstrike
  • Network Security
  • Netwitness
  • Stealthwatch
  • Other tools
  • Tessian (Email Sec Platform)
  • Attivo (Deception Tech)

Skills

Other
CrowdStrike EDRNot disclosed