Job Description

Key Responsibilities

• Administer, configure, and maintain CrowdStrike Falcon for endpoint detection and response (EDR)
• Monitor security alerts, investigate threats, and lead incident response activities
• Tune detection policies, prevention settings, and exclusions to reduce false positives
• Manage endpoint security across Windows, macOS, and Linux environments
• Perform threat hunting and analyze indicators of compromise (IOCs)
• Collaborate with IT and SOC teams to remediate vulnerabilities and security incidents
• Maintain documentation for security processes, configurations, and incidents
• Support compliance requirements and security audits as needed
• Stay current with emerging threats, vulnerabilities, and security best practices

Required Qualifications

• 3+ years of experience in cybersecurity, system administration, or information security
• Strong understanding of endpoint security, malware analysis, and attack vectors
• Experience with incident response and security investigations
• Familiarity with SIEM tools, logs, and alert triage
• Knowledge of Windows and Active Directory environments (macOS/Linux a plus)
• Strong troubleshooting, communication, and documentation skills

Preferred Qualifications

• Hands-on experience administering CrowdStrike Falcon
• CrowdStrike certifications (CCFA, CCFR, or similar)
• Experience with additional security tools (SIEM, firewall, vulnerability scanners)
• Scripting or automation experience (PowerShell, Python, Bash)
• Knowledge of security frameworks (NIST, CIS, ISO 27001)
• Experience in regulated environments (government, healthcare, finance)
• Setting up data loss protection in CrowdStrike.