Crowdstrike Security Engineer

We are hiring a skilled CrowdStrike Security Platform Engineer with strong hands-on experience in deploying, configuring, integrating, and managing the CrowdStrike Falcon platform and its broader suite of cybersecurity solutions across enterprise environments.

The ideal candidate should have strong expertise in Falcon Endpoint Security / EDR / XDR, along with exposure to or hands-on experience across Identity Security, Next-Gen SIEM, Cloud Security, Data Security, Exposure Management, Threat Intelligence, SaaS Security, and security automation.

Key Responsibilities

• Deploy, configure, manage, and troubleshoot the CrowdStrike Falcon platform across enterprise environments.
• Implement and manage Falcon Endpoint Security, EDR and XDR across Windows, Linux, and macOS environments.
• Perform endpoint onboarding, sensor deployment, policy configuration, health monitoring, upgrades, and troubleshooting.
• Implement and manage CrowdStrike Identity Security / Identity Threat Protection (ITDR) capabilities.
• Configure and support CrowdStrike Next-Gen SIEM / Falcon LogScale for log ingestion, security monitoring, threat detection, investigation, and correlation.
• Support integration of CrowdStrike with existing SIEM, SOAR, IAM, Active Directory, cloud, network, and security infrastructure.
• Support deployment and management of CrowdStrike Cloud Security across cloud workloads, containers, Kubernetes, and cloud-native environments.
• Support CrowdStrike Exposure Management and vulnerability/exposure assessment activities.
• Work with CrowdStrike Data Security capabilities to provide visibility and protection of sensitive enterprise data.
• Support CrowdStrike Threat Intelligence and threat-hunting activities to identify emerging threats and adversary activity.
• Configure and manage Falcon Fusion / SOAR and security automation workflows to improve detection and response efficiency.
• Support relevant SaaS Security capabilities and integrations as required by customer environments.
• Monitor security alerts, investigate threats, and support incident detection, response, containment, and remediation.
• Perform threat hunting and investigate endpoint, identity, cloud, and security events.
• Troubleshoot deployment, agent, policy, integration, detection, and platform-related issues.
• Develop and maintain technical documentation, deployment procedures, configuration standards, and troubleshooting guides.
• Coordinate with IT, SOC, infrastructure, cloud, and cybersecurity teams to ensure successful implementation and ongoing operations.
• Participate in customer deployments, migrations, upgrades, health checks, and technical support activities.

Requirements

• 510 years of experience in cybersecurity, endpoint security, SOC, security engineering, or a related field.
• Strong hands-on experience with the CrowdStrike Falcon platform in enterprise environments.
• Strong practical experience with CrowdStrike Falcon EDR/XDR and endpoint security.
• Hands-on experience or good working knowledge of CrowdStrike Identity Security / ITDR.
• Experience with CrowdStrike Next-Gen SIEM / Falcon LogScale or equivalent SIEM technologies.
• Knowledge or experience with CrowdStrike Cloud Security, Exposure Management, Data Security, Threat Intelligence, SaaS Security, and security automation will be highly preferred.
• Strong understanding of EDR, XDR, SIEM, SOAR, ITDR, IAM, cloud security, vulnerability management, threat intelligence, and incident response.
• Experience deploying and managing security agents across Windows, Linux, and macOS.
• Good understanding of endpoint security architecture, policies, exclusions, detection rules, prevention controls, and security configurations.
• Experience with Active Directory, Entra ID/Azure AD, IAM, APIs, and security integrations.
• Strong troubleshooting and analytical skills.
• Excellent communication and customer-facing skills.
• Ability to work independently and collaborate with IT, SOC, infrastructure, cloud, and cybersecurity teams.

Preferred Skills & Certifications

• CrowdStrike certifications or relevant CrowdStrike training.
• Experience with enterprise-scale CrowdStrike deployments and migrations.
• Experience implementing multiple CrowdStrike Falcon modules rather than only Falcon EDR.
• Knowledge of PowerShell, Python, REST APIs, or other scripting/automation technologies.
• Relevant cybersecurity certifications such as CISSP, CEH, Security+, GIAC, or equivalent.
• Experience working with enterprise SOC, MDR, SIEM/SOAR, and incident response environments.