Security Engineer, CrowdStrike

Ascera•St. Petersburg, FL

About The Position

SP6 is seeking a full-time consultant to join its North American services teams. The Security Engineer will provide hands-on CrowdStrike Falcon expertise to customers and serve as a technical resource for SP6 colleagues as the CrowdStrike practice grows. The work spans multiple industries, Falcon modules, and customers, with a focus on Falcon Next-Gen SIEM (NG-SIEM) and Falcon AI Detection and Response (AIDR), as well as Falcon Fusion SOAR, Falcon Onum, and Falcon Foundry. Consultants support customers through professional services and managed services. Professional services include longer-term residencies embedded with a customer and outcome-based projects with defined milestones and deliverables. Managed services provide ongoing support, with SP6 operating and maintaining a customer's Falcon environment as an extension of its security team. The role includes designing, deploying, tuning, and administering Falcon environments; supporting customer adoption and knowledge transfer; and leading projects from requirements gathering through handoff. The consultant also contributes best practices, develops expertise across the Falcon platform and broader security landscape, and manages multiple concurrent customer engagements.

Requirements

Hold active CrowdStrike Certified Falcon Administrator (CCFA) and CrowdStrike Certified SIEM Engineer (CCSE) certifications.
At least 1 year of hands-on CrowdStrike Falcon experience, including Next-Gen SIEM.
At least 3 years of cybersecurity experience.
Understand security log sources, normalization, correlation, and detection dependencies.
Have working knowledge of MITRE ATT&CK, NIST CSF, OWASP, and incident response processes.
Have a strong understanding of security technologies including EDR/XDR, firewalls, IDS/IPS, WAF, DNS, proxy, IAM, Active Directory, and cloud security.
Have experience writing queries, detections, and dashboards in CrowdStrike Query Language (CQL).
Have experience in requirements gathering, documenting requirements, requirements analysis, and testing.
Demonstrate the ability to manage multiple customers or projects simultaneously in a project-based or ongoing managed-services setting.
Have excellent verbal and written communication skills, including the ability to explain technical topics to non-technical audiences.

Nice To Haves

Experience with AIDR.
Cybersecurity experience in SOC operations, security engineering, threat detection, or incident response.

Responsibilities

Architect, deploy, and tune Falcon Next-Gen SIEM, including onboarding data sources, building parsers, writing detections and dashboards, and supporting migrations from other SIEMs.
Help customers adopt Falcon AIDR (Guardian) to secure workforce AI usage and in-house AI applications and agents.
Design and configure playbooks, workflows, and integrations in Falcon Fusion SOAR.
Design and configure Falcon Onum listeners, pipelines, and datasinks.
Design and configure custom applications using Falcon Foundry.
Lead deployments, migrations, health checks, and outcome-based projects from requirements gathering through handoff.
Administer customers' Falcon environments, including policy and sensor management, detection tuning, platform health monitoring, and regular service-level reporting.
Apply prior experience, share best practices, and create solutions that maximize customer value from Falcon and support user adoption.
Provide knowledge transfer to customers throughout engagements.
Serve as a hands-on CrowdStrike resource for SP6's internal team by answering technical questions and cross-training colleagues.
Manage time across multiple concurrent customers, set clear expectations, and keep engagements moving.
Develop and continually extend expertise across the Falcon platform and the broader security landscape.