Endpoint Security Support Analyst (Crowdstrike)

Resource Management Concepts, Inc.•Charleston, SC

14h

About The Position

The Naval Information Warfare Center (NIWC) Atlantic Defensive Cyberspace Operations (DCO) Integrated Product Team (IPT) is charged with the mission of conducting Defensive Cyberspace Operations to defend subscriber networks. The DHA Cybersecurity Operations Center (CyOC) coordinates and orchestrates cybersecurity activities execution at the DoD Component scale to protect information systems against unauthorized activity, vulnerabilities, or threats. RMC is hiring for an experienced Endpoint Security Support Analyst (Crowdstrike) who will support a US Navy environment. The Endpoint Security Support Analyst serves as a frontline interface between DHA subscribers and the Endpoint Security team. This role is responsible for monitoring the CrowdStrike Falcon console, performing initial triage of security alerts, and providing Tier 1 customer support for endpoint security issues. The position focuses on documenting and categorizing events using established playbooks, handling service desk inquiries, and escalating complex issues to senior Endpoint Security Operators for resolution.

Requirements

A minimum of one to two years of experience in an IT help desk, customer support, or similar administrative role.
Must be able to obtain a DoD 8570 IAM Level I certification within 6 months of hire.
An Associate's degree in a relevant field or two years of equivalent professional experience.
Secret Security Clearance
Strong written and verbal communication skills with an emphasis on customer service.
Ability to follow established procedures and checklists with high attention to detail.
Strong analytical skills for initial problem assessment and categorization.
Proficiency with standard desktop programs (MS Office, Adobe Acrobat).

Nice To Haves

Prior experience using enterprise ticketing systems, particularly ServiceNow.
Familiarity with basic host-based security tools and Endpoint Detection & Response (EDR) concepts.
Basic understanding of Windows and/or Linux operating systems.
Experience with MS Teams, Confluence, and SharePoint for documentation and team collaboration.

Responsibilities

Act as the first responder for customer support requests submitted via the service desk (ServiceNow).
Monitor the CrowdStrike detection queue and provide Tier 1 support for endpoint security inquiries.
Perform initial triage of low-to-medium severity alerts using established mini-playbooks.
Accurately document findings and categorize detections as Benign, an Event, or requiring escalation.
Escalate complex technical issues, unresolved user problems, and potential Incidents to senior Endpoint Security Operators for advanced investigation and response.
Assist senior operators by running pre-defined compliance reports, tracking task completion in the ticketing system, and helping to maintain accurate records for auditing purposes.