Security Engineer, CrowdStrike

Ascera•St. Petersburg, FL

10h

About The Position

SP6 is seeking a full-time consultant to join its North America services teams. The role focuses on CrowdStrike Falcon Next-Gen SIEM (Falcon NG-SIEM) and Falcon AI Detection and Response (AIDR), with hands-on work across Falcon Fusion SOAR, Falcon Onum, and Falcon Foundry. The consultant serves as a technical expert for customers and an internal resource who answers questions and cross-trains colleagues as SP6’s CrowdStrike practice grows. The work spans multiple customer use cases, industries, and Falcon modules. Consultants support customers through professional services—including longer-term residency engagements and outcome-based projects—and managed services, providing ongoing support and operating and maintaining customers’ Falcon environments. The position involves leading deployments, migrations, health checks, and projects from requirements gathering through handoff, as well as administering customer Falcon environments and providing knowledge transfer. Consultants manage work across concurrent customers and continually extend their Falcon and security expertise.

Requirements

Hold active CrowdStrike Certified Falcon Administrator (CCFA) and CrowdStrike Certified SIEM Engineer (CCSE) certifications.
At least 1 year of hands-on CrowdStrike Falcon experience, including Next-Gen SIEM.
At least 3 years of cybersecurity experience; SOC operations, security engineering, threat detection, or incident response experience is preferred.
Understand security log sources, normalization, correlation, and detection dependencies.
Working knowledge of MITRE ATT&CK, NIST CSF, OWASP, and incident response processes.
Strong understanding of security technologies including EDR/XDR, firewalls, IDS/IPS, WAF, DNS, proxy, IAM, Active Directory, and cloud security.
Experience writing queries, detections, and dashboards in CrowdStrike Query Language (CQL).
Experience in requirements gathering, documenting requirements, requirements analysis, and testing.
Ability to manage multiple customers or projects simultaneously in a project-based or ongoing managed services setting.
Excellent verbal and written communication skills, including explaining technical topics to non-technical audiences.

Nice To Haves

Experience with AIDR.
Cybersecurity experience in SOC operations, security engineering, threat detection, or incident response.

Responsibilities

Architect, deploy, and tune Falcon Next-Gen SIEM, including onboarding data sources, building parsers, writing detections and dashboards, and supporting migrations from other SIEMs.
Help customers adopt AIDR (Guardian) to secure workforce AI usage and in-house AI applications and agents.
Design and configure playbooks, workflows, and integrations in Falcon Fusion SOAR.
Design and configure Falcon Onum listeners, pipelines, and datasinks.
Design and configure custom apps for custom applications using Falcon Foundry.
Lead deployments, migrations, health checks, and outcome-based projects from requirements gathering through handoff.
Administer customer Falcon environments, including policy and sensor management, detection tuning, platform health monitoring, and regular reporting against service levels.
Share best practices and create solutions that maximize customers’ value from Falcon and support user adoption.
Provide knowledge transfer to customers throughout each engagement.
Answer internal technical questions and cross-train colleagues as a hands-on CrowdStrike resource.
Manage time across multiple concurrent customers, set clear expectations, and keep engagements moving.
Develop and continually extend expertise across the Falcon platform and the broader security landscape.