Security Support Engineer
Current• Facilitating communication and reporting false negatives & false positives to our labs' teams via Jira.• Supporting SIEM, EDR, SOAR, and TIP integrations that range from CrowdStrike, SentinelOne, Carbon Black, Splunk Phantom, etc.• Assisting enterprise clients in analyzing malicious websites and file types by identifying IOC’s and MITRE ATT&CK Framework.• Utilizing Splunk to search error logs, client IDP information, and account information. • Supporting On-Prem & Cloud software configurations ranging from user permission roles, submission types, SAML 2.0 SSO, and YARA Rules.• Collaborate with our DevOps and legal team to report bugs and potential compliance issues.• Supporting our IR Mailbox that handles automated scanning of emails that may contain malicious QR Codes, URLs, or SPAM.• Assisting in writing reports, knowledge base articles, and technical writing documentation for new onboarding training.• Utilizing the Salesforce platform to manage ticket queues.• Support Windows & Ubuntu on-premise installations.• Demo products to enterprise clients to understand the fundamentals of the platform.• Support 24/7 on call in case of premium enterprise client emergency.