gruve · India (Remote)
About Gruve Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks. Position summary: We are looking for a proactive L1 System Administrator to support day-to-day Microsoft Defender operations . The role is responsible for monitoring security alerts, performing initial triage, validating endpoint protection status, logging incidents and escalating potential threats to L2/L3 teams. The administrator will follow approved security procedures and runbooks to support timely incident response and continuous security monitoring. Key Responsibilities: Microsoft Defender Monitoring Monitor Microsoft Defender portals, security dashboards, alerts and incident queues. Perform initial triage of malware detections, suspicious activities and endpoint security alerts. Review alert details, device information, severity and timestamps to assess potential impact. Perform basic checks on Defender sensor health, endpoint onboarding and protection status. Identify endpoints with failed scans, outdated security intelligence or protection-related issues. Escalate suspicious activities and high-severity alerts according to established procedures. Security Incident & Endpoint Support Create, categorize, prioritize and update security incident tickets in ServiceNow or equivalent ITSM tools. Collect relevant alert evidence, device details, timestamps and investigation information. Perform approved first-level checks using documented security runbooks. Track incidents and coordinate with L2/SOC teams for investigation and remediation. Validate remediation status and endpoi…
Sign in to see the original posting
Browse more developer jobs on RoleBurst