RESPONSIBILITIES
- Develop, implement, and maintain information security policies, standards, and strategic security initiatives
- Manage and optimize CrowdStrike Falcon Next-Gen SIEM to maintain effective security monitoring and visibility
- Configure and maintain log parsing, field extraction, normalization, and data mapping for new and existing log sources
- Deploy, maintain, and troubleshoot Falcon Log Collectors and associated log ingestion pipelines
- Monitor, investigate, and respond to security events and alerts across SIEM, endpoint, identity, network, and cloud security platforms
- Develop and maintain CIS-based security hardening standards across the enterprise environment
- Enhance detection capabilities by incorporating threat intelligence and aligning security controls with the MITRE ATT&CK framework
REQUIREMENTS
- BA/BS/ Bachelor's degree or additional experience in lieu of degree
- Recognized security certification (CISSP, CEH or others)
- Recognized cloud certification (CSSP, AWS CSA, CompTIA Cloud+, CCSK or others)
- 3-5 years of prior experience in an information security role
- Demonstrated experience with Powershell and Python
- Experience with Entra ID and multi-factor authentication technologies
- Experience administering and supporting CrowdStrike Falcon Next-Gen SIEM or comparable enterprise SIEM platforms
- Demonstrated understanding of authentication protocol including Kerberos, SAML, OpenID Connect, and OAUTH
- Demonstrated experience automating tasks and working with API's
- Experience with SOAR platforms and security automation
Remote Status:
Not specified
Seniority Level:
Mid-Level