Level 2 - MDR Engineer / Incident ResponderLocation: BengaluruRole Overview:- Level 2 Engineers are the core incident responders and platform operators responsible for advanced triage, containment, and mitigation. They tune detection rules, investigate threat activity, and perform forensic data correlation across integrated platforms.
Key Responsibilities:- Conduct deep-dive investigations of escalated alerts from Level 1 using
SentinelOne Deep Visibility, FortiSIEM, and FortiSOAR.
- Correlate data across multiple sources (EDR, SIEM, UEBA, Vicarius) to validate and scope threats.
- Develop and fine-tune SIEM correlation rules and SOAR playbooks for improved detection fidelity.
- Lead incident response actions - host isolation, malware eradication, credential reset, and recovery validation.
- Manage agent health, policy configuration, and deployment for SentinelOne endpoints.
- Collaborate with Mercyhealth's internal IT and compliance teams for incident reporting and evidence collection.
- Generate weekly operational dashboards and metrics for governance meetings.
Required Skills & Experience:- 3 to 5 years of SOC/MDR/IR experience.
- Hands-on expertise with SentinelOne Complete EDR, FortiSIEM/FortiSOAR, and UEBA solutions.
- Strong analytical, scripting, and forensic investigation abilities.
- Familiarity with HIPAA, HITRUST, and healthcare compliance requirements.
- Certifications preferred: CompTIA Security+, CEH, GCIA, GCIH or vendor-specific Fortinet/SentinelOne credentials.
