Security Engineer, CrowdStrike

SP6 is seeking a full-time consultant to support customers and its internal team across CrowdStrike Falcon services. The role focuses on implementing and managing Falcon Next-Gen SIEM and AI Detection and Response, along with related platform tools, customer engagements, and knowledge transfer.

Responsibilities:

• You'll support customers through two delivery models, often working with several customers at once:
• Professional services:
• Residency engagements: longer-term engagements embedded with a customer, typically lasting from a few months to a year
• Outcome-based engagements: project work with defined milestones and deliverables delivered within an agreed timeline
• Managed services: ongoing, recurring support in which SP6 operates and maintains the customer's Falcon environment as an extension of their security team
• Architect, deploy, and tune Next-Gen SIEM: onboard data sources, build parsers, write detections and dashboards, and support migrations from other SIEMs
• Help customers adopt AIDR (Guardian) to secure workforce AI usage and in-house AI applications and agents
• Design and configure playbooks, workflows, and integrations in Fusion SOAR
• Design and configure in Falcon Onum listeners, pipelines and datasinks
• Design and configure custom apps for custom applications using Falcon Foundry
• Lead deployments, migrations, health checks, and outcome-based projects from requirements gathering through handoff
• Provide ongoing administration of customers' Falcon environments, including policy and sensor management, detection tuning, platform health monitoring, and regular reporting against service levels
• Leverage previous experience, share best practices, and create innovative solutions that maximize customers' value from Falcon and aid in user adoption
• Provide knowledge transfer to customers throughout each engagement
• Serve as a hands-on CrowdStrike resource for our internal team, answering technical questions and cross-training colleagues
• Manage your time across multiple concurrent customers, setting clear expectations and keeping each engagement moving
• Develop and continually extend expertise across the Falcon platform and the broader security landscape

Requirements:

• Hold active CrowdStrike certifications: CrowdStrike Certified Falcon Administrator (CCFA) and CrowdStrike Certified SIEM Engineer (CCSE)
• 1+ years of hands-on CrowdStrike Falcon experience, including Next-Gen SIEM
• 3+ years of cybersecurity experience
• Understanding of security log sources, normalization, correlation, and detection dependencies
• Working knowledge of MITRE ATT&CK, NIST CSF, OWASP and incident response processes
• Strong understanding of security technologies: EDR/XDR, firewalls, IDS/IPS, WAF, DNS, proxy, IAM, Active Directory, and cloud security
• Experience writing queries, detections, and dashboards in CrowdStrike Query Language (CQL)
• Experience in requirements gathering, documenting requirements, requirement analysis, and testing
• Proven ability to manage multiple customers or projects at the same time, in a project-based or ongoing managed services setting
• Excellent verbal and written communication skills, including explaining technical topics to non-technical audiences
• Preferably has experience with AIDR
• preferably in SOC operations, security engineering, threat detection, or incident response