Overview In this role, you help clients strengthen cyber resilience by deploying and tuning Next-Gen CrowdStrike capabilities within a mature SOC. You will design SIEM architectures, automate data workflows, and craft threat-detection content to combat adversaries. You'll work with cross-functional teams to elevate SOC maturity and deliver impactful security operations improvements. This role offers hands-on platform optimization, integration, and threat-hunting opportunities in a leading consulting environment. Compensation / Benefitsdiscretionary annual incentive program ResponsibilitiesDesign and implement Falcon Next-Gen SIEM architectures with data onboarding, normalization, enrichment, and correlation rulesDeploy log-ingestion pipelines using data fabric tech and API integrations (e.g., Cribl, Tines)Administer and optimize the CrowdStrike Falcon platform across Windows, macOS, LinuxCollaborate with SOC analysts to prioritize and tune threat-detection content and use cases with IOAs and correlation rulesBuild and maintain Falcon Fusion SOAR playbooks and API integrations to automate alert enrichment, triage, and responseAdvise clients on SOC maturity and platform capabilities Key requirementsBachelor's degree in computer science, cybersecurity, information systems, or equivalent work experience5+ years in security operations, threat detection, or enterprise IT security3+ years hands-on experience with CrowdStrike Falcon (NG SIEM, EDR/XDR, Fusion SOAR, Identity Protection, Intelligence, Charlotte AI)Experience with detection and response activities (investigations, triage, host isolation, indicators blocking) and MITRE ATT&CK/Cyber Kill ChainExperience using Python or another scripting language for automation and integrationsAbility to travel up to 50%Limited immigration sponsorship may be availableEffective written and verbal communicationmeticulous attention to detailability to build and sustain professional relationshipsCrowdStrike Falcon platform (NG SIEM, EDR/XDR, Fusion SOAR, Identity Protection, Intelligence, Charlotte AI)Threat-detection content development and tuningLog ingestion and data normalization
Not specified in the original listing.
Not specified in the original listing.
