Junior Endpoint Detection and Response (EDR) Analyst
Rapid Strategy is seeking a Junior Endpoint Detection and Response (EDR) Analyst. Rapid Strategy is an award-winning and African-American owned small business providing cybersecurity services to the private and public sector. Based in Charlotte, NC, we support our clients across the North Carolina and DMV area. You can learn more about Rapid Strategy at www.RapidStrategy.io
As a Junior EDR Analyst, you will play a crucial role in safeguarding our organization's digital assets by monitoring and responding to endpoint security incidents. This entry-level position is ideal for candidates who possess a strong interest in cybersecurity, incident detection, and response. You will work closely with the security team to analyze and mitigate potential security threats and contribute to enhancing the overall security posture of the organization.
Responsibilities:
- Monitor and analyze security alerts generated by EDR tools to identify potential threats.
- Investigate suspicious activities on endpoints and escalate incidents as necessary.
- Assist in incident response activities, including containment, eradication, and recovery.
- Utilize and maintain EDR tools to ensure optimal performance.
- Assist in the implementation and configuration of security tools as needed.
- Generate regular reports on security incidents, investigations, and trends.
- Document standard operating procedures for EDR activities.
- Participate in security awareness training and contribute to the development of security policies.
Qualifications:
- Bachelor's degree in Computer Science, Information Security, or a related field.
- 1-2 years of experience in EDR or EDR related responsibilities.
- Familiarity with EDR tools and security information and event management (SIEM) systems.
- Basic knowledge of operating systems, networking, and common security technologies.
- Excellent analytical and problem-solving skills.
- Effective communication skills and the ability to work well in a team environment.
- Relevant certifications such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), or equivalent are a plus.
- Experience with Carbon Black, CrowdStrike Falcon, SentinelOne, Symantec Endpoint, Tenable Nessus, and/ or Qualys are a plus.