Application Engineer 4 (EDR)

Avid Technology Professionals • Annapolis Junction, MD

6d

About The Position

This role focuses on EDR Solutions, Cloud Applications, Cloud Security, Security Operations Center (SOC) Support, Network Security, and Windows Forensics. The ideal candidate will have proficiency in EDR platforms, experience with cloud security and providers, and a strong understanding of securing cloud-hosted workloads. Support for SOC functions, including monitoring, analyst training, documentation, incident response, and process improvement, is crucial. A solid grasp of network protocols, traffic analysis, and intrusion detection systems is also required, along with in-depth knowledge of Windows operating system internals and forensic tools.

Requirements

• Proficient in one or more EDR platforms (Trellix HX/EDRF or Microsoft Defender for Endpoint EDR, preferably both).
• Experience with cloud security and familiarity with cloud service providers (AWS or Azure, preferably both).
• Experience securing cloud-hosted workloads using EDR solutions and understanding cloud-native security controls and logging (Microsoft Sentinel, Microsoft Defender, Microsoft Purview, AWS CoudWatch, AWS CloudTrail, AWS GuardDuty, or AWS Security Hub).
• CCSP Certified Cloud Security Professional certification or equivalent.
• Experience supporting SOC functions such as assisting in monitoring, training analysts, documenting SOPs, incident response coordination, analysis of security events, and process/procedure improvement.
• Microsoft Certified: Security Operations Analyst Associate (SOAA) or equivalent.
• Understanding of network protocols, traffic analysis, and intrusion detection systems (CompTIA Security+ is required).
• In-depth knowledge of Windows operation system internals, registry, and file system.
• Familiarity with forensic tools like EnCase, FTK, or open-source alternatives.
• SANS Windows Forensic Analysis (FOR500) or equivalent.

Responsibilities

• Proficient in one or more EDR platforms (Trellix HX/EDRF or Microsoft Defender for Endpoint EDR, preferably both).
• Experience with cloud security and familiarity with cloud service providers (AWS or Azure, preferably both).
• Experience securing cloud-hosted workloads using EDR solutions and understanding cloud-native security controls and logging (Microsoft Sentinel, Microsoft Defender, Microsoft Purview, AWS CoudWatch, AWS CloudTrail, AWS GuardDuty, or AWS Security Hub).
• Supporting SOC functions such as assisting in monitoring, training analysts, documenting SOPs, incident response coordination, analysis of security events, and process/procedure improvement.
• Understanding of network protocols, traffic analysis, and intrusion detection systems.
• In-depth knowledge of Windows operation system internals, registry, and file system.
• Familiarity with forensic tools like EnCase, FTK, or open-source alternatives.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed