About the role
Role EDR Researcher
JOB Description
Good working knowledge of EDR solutions such as MDATP FireEye CrowdStrike Falcon Carbon
Black
Must be wellversed with Operating System concepts ie WindowsLinuxMacOS
Ability to distinguish between False Positives and False Negatives detections with respect to
logs available
Good Exposure to OSINT tools sandboxing encodingdecoding techniques for independent
investigation
Must be able to Investigate and Triage EDR related s with an ability to share detailed
investigation reports to clients within SLA
Knowledge of Cyber kill chain and MITRE ATTCK techniques and tactics used by adversary to
evade detection
Awareness of various stages of Incident Response which involves indepth analysis and RCA
submission on security incidents
Good understanding of Malware Analysis ie static and dynamic and its variants
Exposure to adversary simulation and red teaming tools such as Caldera PowerShell Empire
Cactus Torch
Understanding of Database language ie KQL is a Plus
Excellent communication skills for crossgroup and interpersonal skills with ability to articulate
business need for detection improvements
Certification in OSCP OSCE GREM GCIH GCFA will be highly preferred