Job Information
CrowdStrike, Inc. Sr. SOC Analyst (Onsite - McLean) in Kirkland, Washington
CrowdStrike, Inc. Full time R19358 About the Role:
Come join the CrowdStrike Platform Operations team and join our mission to protect our most critical customers. The Resident Responder Consultant is responsible for providing dedicated support to customers with implementation, ongoing operational support, threat hunting, and incident response functions using the CrowdStrike platform and related technologies. The Resident Responder Consultant will act as an oversight and technical escalation point for customer security operations center (SOC) team using CrowdStrike and related technologies as well as having responsibility for planning, optimizing, maintaining, and follow on support for the CrowdStrike platform and associated applications.
Specific Opportunity Information:
Onsite
Secret Clearance
Background and drug testing are required
What You'll Do:
Advise customer of Cloud Security best practices, Cloud Security Configuration, and integration to meet business requirements
Design, implement, and configure SIEM solutions to collect, correlate, and analyze security events and logs from various sources.
Gather and support log sources into Elastic, creating custom detections to help expand holistic security posture visibility
Help customers build and mature their security operations and threat detection and response capabilities
Develop and maintain correlation rules, filters, and dashboards to improve the accuracy and efficiency of threat detection
Align cloud configurations and log sourcing for best practices
Guide customers by researching and assessing customer threats and indicators of compromise
Create reporting dashboards based on cloud platform security events
Act as escalation point cloud platform inquiries and issues
Review current cloud and SIEM environments to address any performance and security objectives, gaps, and/or opportunities
Optimizes, configures, and tests cloud and SIEM technology deployment to assist with custom detection and dashboard creation as well as log ingestion
Work closely and collaboratively onsite with customer security and information technology teams
Leverage APIs, builds scripts, and develop processes to support SIEM configuration
Act as the technical and/or senior level interface for customer concerns or escalations
Maintain awareness of customer environment for upcoming technologies and features releases to assist customer with adoption and operationalizing into their security operations process
What You'll Need:
Bachelor's degree, in Computer Science, Information Technology, Cybersecurity or a related field, and/or equivalent military or work experience.
Currently have or can obtain necessary security clearances, per customer requirement
5+ years of experience with SIEM administration, configuration, and management
3+ years of client-facing consulting experience
Highly knowledgeable on Windows, Mac, and Linux platforms as well as cloud environments such as AWS, GCP, and Azure
Working knowledge of Microsoft Office applications, Word, Excel, Access, PowerPoint, etc.
Strong communication and collaboration skills
Proven ability to convey technical concepts to audiences with varying technical expertise, from analyst to executive levels
Broad experience in computer and network systems security
Solid analytical/problem solving skills with capability to identify solutions to unusual and complex problems
High level of m