L2 Operations Engineer - Malware Tools & Endpoint Protection

Job Overview:

BRAVE is seeking an L2 Operations Engineer - Malware Tools to support endpoint protection platforms, investigate malicious activity, and remediate endpoint security incidents in a 24x7 operational environment.

Key Responsibilities:

• Provide 24x7x365 monitoring, alert triage, risk rating, and incident resolution for endpoint protection tools.
• Triage, diagnose, and resolve endpoint security incidents escalated from L1/L1.5; escalate unresolved items to L3 with deep technical findings.
• Install, maintain, patch, and manage endpoint protection agents and consoles across Windows client systems.
• Handle phishing alerts, mail security reports, and work alongside client security teams for mitigation.
• Integrate and troubleshoot key secrets using Azure Key Vault and manage identity/endpoint cross-tower operations with DLP, Hosting, and IDAM teams.
• Participate in RCA reviews, alert tuning to reduce noise, and keep ServiceNow tickets and SOP documentation up-to-date.
• Write operational scripts using PowerShell or Python for administrative automation.

Required Skills & Experience:

• 12 years of core L2 operational experience in Endpoint Security and Malware Investigation.
• Expertise with CrowdStrike Falcon, Microsoft Defender for Endpoint, RSA, Phishing tools, and Azure Key Vault.
• Experience with SIEM/SOAR platforms (e.g., Splunk) and Windows OS security management.
• Experience in a 24x7 operational support model following standard ITSM framework.
• Strong English communication skills for incident writing and security reporting.

Preferred Certifications:

• CrowdStrike Falcon Administrator
• Microsoft SC-200 (Security Operations Analyst)
• CompTIA Security+