Job Description
The Endpoint Security Analyst is part of our client’s Endpoint Security team, which owns the reliability, administration, and operational effectiveness of enterprise endpoint security capabilities, with primary accountability for Endpoint Detection and Response and supporting security platforms. This customer-facing role provides end-to-end technical leadership and resolves complex issues across Windows, macOS, Linux, and cloud environments.
The CrowdStrike Engineer is responsible for performing comprehensive audits of the CrowdStrike Falcon platform, analyzing security configurations and deployment effectiveness, and providing actionable recommendations to optimize the CrowdStrike platform at our client.
This role ensures that the organization’s endpoint security posture is maintained at an optimal level through continuous review and improvement.
Additionally, as a member of the Endpoint Security Team this role requires working with end users to provide expert, end-to-end technical troubleshooting for complex issues across Windows, Linux, Mac and Cloud environments.
CrowdStrike Maintenance Audit
- Conduct a thorough audit of the CrowdStrike Falcon console, including policy configurations and sensor deployments.
- Generate detailed reports outlining findings, potential vulnerabilities, and areas for improvement.
- Support the implementation of recommended changes and monitor their impact.
- Develop and document processes to maintain the CrowdStrike platform.
CrowdStrike Administration
- Platform Management: Own the installation, implementation, maintenance, administration, availability, and operational performance of all CrowdStrike Falcon platform components.
- Sensor Deployment: Manage the deployment, monitoring, and health of Falcon sensors across Windows, macOS, Linux, and cloud environments. Troubleshoot sensor installation and communication issues.
- Configuration and Policies: Configure and manage deployment of prevention policy settings to align with the organization’s security posture.
- Incident Support: Provide support to end users and server owners reporting issues through our client’s help desk.
- Work collaboratively with Security Analysts and Incident Responders to ensure the platform is functioning optimally for threat detection, investigation, and response.
- Documentation: Create and maintain documentation for CrowdStrike configuration, processes, and best practices.
- Collaboration: Collaborate effectively within the Endpoint team to work and resolve EDR support tickets, share technical knowledge, communicate ticket status, and ensure timely, accurate resolution of endpoint-related issues.
- Work closely with IT, Network, and System Administration teams to seamlessly integrate security solutions into the overall IT infrastructure.
Minimum Qualifications: Knowledge and Skills:
- 10+ years of IT related experience.
- 5+ years of deep, hands-on expertise with CrowdStrike Falcon in an enterprise environment.
- Extensive Cyber and IT security knowledge.
- Expert-level knowledge of the CrowdStrike EDR platform and CrowdStrike best practices.
- Expert-level knowledge of Windows, macOS, and Linux operating systems and security features.
- Experience in deploying and maintaining CrowdStrike in a large enterprise environment.
- Experience with cloud hosted endpoints.
- Proficiency in scripting languages for automation and analysis (e.g., Python, PowerShell, Bash)
- Strong understanding of network protocols and host-based firewalls.
- Experience with documentation of processes and configurations.
- Delivers critical contributions to the success of complex and/or impactful projects that lead to improved cybersecurity hygiene.
Additional Skills
- Influence - Expresses complex ideas confidently with appropriate level of details and adapts approach by tailoring a clear, concise, and compelling message based on audience.
- Expertise - Creates and shares new knowledge in addition to setting best practices in the organization; is a known domain leader.
- Teamwork - Collaborates effectively across teams by building trust, valuing diverse perspectives, sharing information, and aligning others toward shared goals and successful outcomes.