The posting
Job Title: CrowdStrike Engineer
Location: Chennai
Experience: 4–8 Years
Employment Type: Full-Time
Notice Period: Immediate Joiners or Up to 15 Days
Role Summary
We are seeking a skilled CrowdStrike Engineer to join our Cybersecurity team. The ideal candidate will be responsible for implementing, managing, and optimizing the CrowdStrike Falcon platform to protect enterprise endpoints against advanced cyber threats. The role involves endpoint security administration, threat detection, incident response, policy management, and continuous improvement of the organization's security posture.
Key Responsibilities
CrowdStrike Administration
- Deploy, configure, and manage the CrowdStrike Falcon platform across Windows, macOS, and Linux endpoints.
- Create and maintain prevention, detection, and response policies.
- Manage Falcon sensors, host groups, exclusions, and security configurations.
- Ensure endpoint protection policies align with organizational security standards.
Endpoint Security
- Monitor endpoint security events and investigate suspicious activities.
- Identify, analyze, and respond to malware, ransomware, phishing, and advanced persistent threats (APTs).
- Perform root cause analysis and recommend remediation actions.
- Support endpoint hardening and vulnerability remediation initiatives.
Threat Detection & Incident Response
- Investigate security alerts generated by CrowdStrike Falcon and other security tools.
- Conduct threat hunting activities using Falcon Insight and Falcon Intelligence.
- Support incident response activities, including containment, eradication, and recovery.
- Document investigation findings and prepare incident reports.
Security Operations
- Integrate CrowdStrike with SIEM, SOAR, and other enterprise security platforms.
- Tune detection rules and reduce false positives.
- Monitor endpoint health, sensor status, and platform performance.
- Maintain security documentation, operational procedures, and technical runbooks.
Compliance & Reporting
- Generate security reports, dashboards, and compliance metrics.
- Support internal and external audits by providing endpoint security evidence.
- Ensure compliance with organizational policies and security frameworks.
Required Skills & Qualifications
- Bachelor's degree in Computer Science, Cybersecurity, Information Security, or a related field.
- 4–8 years of experience in Endpoint Security or Cybersecurity.
- Hands-on experience with CrowdStrike Falcon Endpoint Protection Platform (EPP) and Endpoint Detection & Response (EDR).
- Strong understanding of Windows, Linux, and macOS security.
- Experience with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or similar.
- Knowledge of endpoint hardening, malware analysis, and threat detection techniques.
- Familiarity with networking concepts, Active Directory, and Identity & Access Management (IAM).
- Experience with scripting using PowerShell, Python, or Bash is an added advantage.
- Excellent troubleshooting, analytical, and communication skills.
Preferred Qualifications
- Experience integrating CrowdStrike with SIEM, SOAR, and ITSM platforms.
- Knowledge of MITRE ATT&CK Framework, Cyber Kill Chain, and threat intelligence.
- Experience with Microsoft Defender, SentinelOne, Carbon Black, or other EDR solutions.
- Familiarity with cloud security environments (AWS, Azure, or GCP).
- Certifications such as CrowdStrike Certified Falcon Administrator (CCFA), CrowdStrike Certified Falcon Responder (CCFR), CompTIA Security+, CEH, CySA+, or equivalent.
Key Skills
- CrowdStrike Falcon
- Endpoint Detection & Response (EDR)
- Endpoint Protection Platform (EPP)
- Threat Hunting
- Incident Response
- Malware Analysis
- Endpoint Security
- Windows Security
- Linux Security
- macOS Security
- SIEM
- Splunk
- Microsoft Sentinel
- QRadar
- Active Directory
- PowerShell
- Python
- MITRE ATT&CK
- Cybersecurity
- Security Operations
