CrowdStrike EDR Engineer

Job Title: CrowdStrike EDR Engineer

Location: Fully Remote, prefer CST

Duration: 12 month

Job Description:

The CrowdStrike Engineer is responsible for performing comprehensive audits of the CrowdStrike Falcon platform, analyzing security configurations and deployment effectiveness, and providing actionable recommendations to optimize the CrowdStrike platform. This role ensures that the organization’s endpoint security posture is maintained at an optimal level through continuous review and improvement. Additionally, as a member of the Endpoint Security Team this role requires working with end users to provide expert, end-to-end technical troubleshooting for complex issues across Windows, Linux, Mac and Cloud environments.

CrowdStrike Maintenance Audit

Conduct a thorough audit of the CrowdStrike Falcon console, including policy configurations and sensor deployments.

Generate detailed reports outlining findings, potential vulnerabilities, and areas for improvement.

Support the implementation of recommended changes and monitor their impact.

Develop and document processes to maintain the CrowdStrike platform.

CrowdStrike Administration

Platform Management:

Own the installation, implementation, maintenance, administration, availability, and operational performance of all CrowdStrike Falcon platform components.

Sensor Deployment: Manage the deployment, monitoring, and health of Falcon sensors across Windows, macOS, Linux, and cloud environments. Troubleshoot sensor installation and communication issues.

Configuration and Policies:

Configure and manage deployment of prevention policy settings to align with the organization's security posture.

Incident Support:

Provide support to end users and server owners reporting issues through the help desk.

Work collaboratively with Security Analysts and Incident Responders to ensure the platform is functioning optimally for threat detection, investigation, and response.

Documentation:

Create and maintain documentation for CrowdStrike configuration, processes, and best practices.

Collaboration:

Collaborate effectively within the Endpoint team to work and resolve EDR support tickets, share technical knowledge, communicate ticket status, and ensure timely, accurate resolution of endpoint-related issues.

Work closely with IT, Network, and System Administration teams to seamlessly integrate security solutions into the overall IT infrastructure.

Minimum Qualifications

Extensive Cyber and IT security knowledge.

Expert-level knowledge of the CrowdStrike EDR platform and CrowdStrike best practices.

Expert-level knowledge of Windows, macOS, and Linux operating systems and security features.

Experience in deploying and maintaining CrowdStrike in a large enterprise environment.

Experience with cloud hosted endpoints

Strong understanding of network protocols and host-based firewalls

Experience with documentation of processes and configurations