Position SummaryThe Manager of Endpoint Detection & Response is responsible for the operational management, governance, and continuous improvement of ADP's Endpoint Detection and Response platform and serves as the primary owner of the CrowdStrike Falcon platform, including Endpoint Detection & Response (EDR) and Identity Threat Detection & Response (ITDR).
The position is responsible for endpoint protection policy management, host lifecycle administration, sensor health and coverage, platform optimization, and identity security monitoring partnering closely with Infrastructure and Endpoint teams, Threat Intelligence, Critical Incident Response among other teams across the enterprise.
Key ResponsibilitiesEndpoint Detection & Response Program Management- Lead day-to-day operations of the enterprise CrowdStrike Falcon platform supporting endpoint detection and response capabilities.
• Manage endpoint security policies, prevention settings, detection controls, host groups, exclusions, and platform configurations.
• Oversee endpoint sensor lifecycle activities (sensor deployment/health, upgrades, testing, and enterprise rollout activities.)
• Monitor platform performance, and compliance metrics.
• Identify and implement automation and operational process improvements that increase efficiency and platform effectiveness.
Identity Threat Detection & Response (ITDR)- Monitor identity-based findings, attack paths, privilege risks, credential exposure concerns, and identity security threats.
• Partner closely with Identity and Access Management teams to investigate and remediate identity security issues.
• Track remediation efforts and provide visibility into identity-related risks and trends.
• Support initiatives that improve enterprise identity security posture and reduce identity-based attack risk.
Leadership and Team Management- Lead and mentor a global team of security analysts.
• Foster a culture of accountability, collaboration, innovation, and continuous improvement.
• Collaborate with peer leaders across Security, Infrastructure, and Technology organizations.
• Build strong partnerships with key stakeholders supporting endpoint and identity security programs.
Metrics, Reporting & Risk Management- Develop dashboards, KPIs, and operational scorecards related to endpoint and identity security.
• Report on sensor coverage, platform health, identity findings, remediation progress, and operational effectiveness.
• Present risk trends and program updates to
• Support audits and compliance reviews.
• Translate technical findings into business-focused risk communications.
To Succeed in This Role:- You'll have a bachelor's degree or equivalent experience.
Qualifications• 5+ years of cybersecurity, endpoint security, security operations, or infrastructure security experience.
• Experience with CrowdStrike Falcon in a large enterprise environment.
• Knowledge of endpoint detection and response technologies, incident response, and threat detection methodologies.
• Familiarity with identity security concepts including Active Directory, Entra ID, privileged access, and authentication technologies.
• Experience with CrowdStrike Identity Threat Detection & Response (ITDR) preferred.
• Relevant Certifications such as CISSP, CISM etc. or equivalent experience
#LI-SD4
#LI-Hybrid
