Senior Falcon Platform Engineer: Cloud, SOC & Automation

XPT Software; Melbourne; In loco; AUD 110.000 - 170.000; Tempo pieno

Descrizione del lavoro

XPT Software in Melbourne is seeking a Senior Engineer to build, deploy and improve CrowdStrike Falcon platform capabilities across on‑premise and cloud environments. You will own Falcon components, sensor health, policies and integrations while partnering with SOC and cloud teams.

This role emphasizes cloud‑native development, automation with Terraform and Python, and robust security controls for GCP and Kubernetes workloads.

Competenze

• Hands-on production engineering of CrowdStrike Falcon, including deployment, policy configuration, sensor lifecycle, host grouping, exclusions, RBAC and troubleshooting.
• Practical experience using Falcon APIs and Python for automation, workflow integration and event processing.
• Terraform for repeatable platform and cloud configuration, modules, state, pipelines and drift management.
• GCP knowledge covering organisations, projects, IAM, service accounts, compute and secure workload integration.
• Kubernetes and container security knowledge including clusters, namespaces, images, admission controls and controlled rollouts.
• Experience building or maintaining cloud-native integrations in Python and Java, including APIs and observability.
• Understanding of endpoint and cloud threat detection, policy tuning and SOC handoff.

Mansioni

• Build, configure and maintain Falcon components including sensor deployment and health, host groups, policies, exclusions, access controls and update rings.
• Engineer reliable Falcon coverage for GCP compute and Kubernetes workloads, partnering on cloud account integration and sensor deployment.
• Create and maintain Terraform modules and deployment pipelines for Falcon resources, cloud integration and Kubernetes components.
• Build Python automation and, where required, Java services or integrations using Falcon APIs and SDKs.
• Integrate Falcon data into Google SecOps, ServiceNow and other workflows; validate mapping and event quality.
• Design and tune detection and response policies, indicators and orchestration workflows with SOC analysts.
• Evaluate AI-assisted triage and response capabilities with human review and auditability.
• Investigate platform health, sensor coverage gaps and ensure runbooks and change records are maintained.

Conoscenze

Falcon platform engineering

Falcon API automation

Terraform automation

GCP IAM & compute

Kubernetes security

Cloud-native integration (Python/Java)

Endpoint/cloud threat detection

Descrizione del lavoro

XPT Software in Melbourne is seeking a Senior Engineer to build, deploy and improve CrowdStrike Falcon platform capabilities across on‑premise and cloud environments. You will own Falcon components, sensor health, policies and integrations while partnering with SOC and cloud teams.

This role emphasizes cloud‑native development, automation with Terraform and Python, and robust security controls for GCP and Kubernetes workloads.