Endpoint Security Analyst

Introduction
A Technical Support Representatives at IBM is a front-line position supporting our products and making sure they are at their best for our customers. With over 100 years in technology, IBM has built a strong reputation of quality service and this role ensures we continue to deliver on that promise. If you enjoy helping people with technical issue, you’ll love your career at IBM.

Your Role and Responsibilities
Who you are:
As a ISA SCC Security analyst you will be engaged to support our customers wrt Endpoint Security, EDR, Email Security & Encryption.

Products : Microsoft Defender, Symantec Endpoint protection Manager, Trend Micro Deep Security Manager.

What you’ll do:

• Perform daily health checks of all Endpoint products to ensure they are functioning optimally and securely.
• Monitor and manage endpoint security solutions to protect against various threats, ensuring the integrity and security of endpoint devices
• Support the deployment, configuration, and maintenance of endpoint agents across the organization, ensuring timely updates and proper functioning.
• Conduct routine security checks to ensure compliance with established security policies and procedures.
• Monitor antivirus/EDR/Email Security alerts and collaborate with the L1 and L3 support teams to mitigate and resolve threats identified through the antivirus console
• Monitor risks generated from the antivirus (AV) /EDR/Email Security console and take appropriate actions with the assistance of L2 and L3 support teams.
• Respond to email security incidents promptly and escalate issues as necessary to ensure swift resolution.
• Work with end users to troubleshoot and resolve any antivirus-related issues, providing effective support and solutions.
• Handle escalated security incidents and work with L3 and SOC teams to ensure a swift and effective resolution of high-priority security issues.
• Support the implementation and management of encryption solutions to protect sensitive data
• Assist in blocking malicious hashes, IP addresses, and domains based on threat advisories, enhancing the security posture.
• Support in creating compliance reports, SLA reports, and daily, weekly, and monthly reports to track and document security activities and performance.
• Ready to work in 24×7 shifts

How we’ll help you grow:

• You’ll have access to all the technical and management training courses you need to become the expert you want to be
• You’ll learn directly from expert developers in the field; our L2 and L3 will mentor
• You have the opportunity to work in many different areas to figure out what really excites you

Required Technical and Professional Expertise

• Experience working in any Endpoint Security product, EDR , Email Security and Encryption.

Preferred Technical and Professional Expertise

• Experience working in any one endpoint security product ( Symantec, Trend Micro ), EDR ( MS Defender, CrowdStrike, Cortex XDR ) Email Security (Proof Point, MS O365) and Encryption ( Bit Locker , McAfee Full drive encryption )