Teams at NCC Group

Administer and maintain endpoint security platforms (Tanium & SentinelOne), deploy and manage Tanium modules, monitor performance, build dashboards and reports, perform audits and compliance checks, troubleshoot endpoint visibility/patching/deployments, integrate endpoint tools with IT/security systems, and provide training and support.

Monitor, detect, investigate and respond to security alerts using Splunk Enterprise Security. Triage incidents, perform log analysis and event correlation, assist threat hunting and vulnerability remediation, escalate significant incidents, and maintain incident documentation and SOC use cases/playbooks.

Monitor, detect, investigate, and respond to security events using Splunk Enterprise Security. Triage incidents, perform log analysis and event correlation, assist threat hunting and vulnerability remediation, escalate significant incidents, and maintain incident documentation and SOC playbooks.