898798 - Senior Consultant - CyberSecurity

Role EDR Researcher

JOB Description

Good working knowledge of EDR solutions such as MDATP FireEye CrowdStrike Falcon Carbon

Black

Must be wellversed with Operating System concepts ie WindowsLinuxMacOS

Ability to distinguish between False Positives and False Negatives detections with respect to

logs available

Good Exposure to OSINT tools sandboxing encodingdecoding techniques for independent

investigation

Must be able to Investigate and Triage EDR related s with an ability to share detailed

investigation reports to clients within SLA

Knowledge of Cyber kill chain and MITRE ATTCK techniques and tactics used by adversary to

evade detection

Awareness of various stages of Incident Response which involves indepth analysis and RCA

submission on security incidents

Good understanding of Malware Analysis ie static and dynamic and its variants

Exposure to adversary simulation and red teaming tools such as Caldera PowerShell Empire

Cactus Torch

Understanding of Database language ie KQL is a Plus

Excellent communication skills for crossgroup and interpersonal skills with ability to articulate

business need for detection improvements

Certification in OSCP OSCE GREM GCIH GCFA will be highly preferred

Skills

Mandatory Skills : EDR