Subject Matter Expert (Support&Ops)

About the role

The CrowdStrike Falcon L3 Engineer is responsible for advanced administration, engineering, troubleshooting, threat hunting, incident response, and operational support of the CrowdStrike Falcon platform. The role serves as the highest technical escalation point for endpoint security incidents, platform optimization, integrations, and security investigations.

What you'll do

• Manage and administer the CrowdStrike Falcon platform
• Configure and maintain prevention policies, detection policies, firewall management, USB device control, and sensor deployment
• Perform health checks and platform optimization activities
• Incident Response & Threat Hunting
• Lead investigation of advanced malware, ransomware, phishing, and endpoint compromise incidents

What you need

• EDR
• Incident response
• Windows Server
• Reporting
• Root cause analysis
• SIEM
• Any graduate

Good to have

• Firewalls
• Splunk
• ServiceNow