Senior CrowdStrike Falcon Engineer

Flint International; España; Hybrid; EUR 90,000 - 130,000; Part time

Job summary

A technology services company is seeking a Senior CrowdStrike Engineer for enterprise-scale CrowdStrike Falcon implementations. This hands-on role focuses on designing, deploying, integrating, and optimizing Falcon across complex environments, while leading troubleshooting and incident response. The position requires strong expertise in EDR/XDR, identity security, and cloud security. The work model is mostly remote, with occasional travel to client sites in Spain.

Qualifications

• Strong expertise in EDR/XDR design, rollout, and operationalization.
• Experience in identity security and cloud security environments.
• Proven ability to lead incident response and technical leadership.

Responsibilities

• Lead large-scale CrowdStrike Falcon deployments from discovery to customer handover.
• Implement and optimize Falcon Identity Protection and cloud security use cases.
• Drive integration activities and ensure operational readiness.
• Lead complex incident response and advanced troubleshooting for customers.
• Produce runbooks and deliver knowledge transfer for customer independence.
• Support pre-sales discovery with accurate scoping and delivery planning.
• Contribute to building a scalable Professional Services practice.

Skills

EDR/XDR design

Identity security

Cloud security

LogScale deployment

Troubleshooting and incident response

Strong communication

Stakeholder management

Education

Bachelor's degree in Computer Science or related field

Tools

CrowdStrike Falcon

AWS

Azure

GCP

Job description

Role overview

We’re looking for a Senior CrowdStrike Engineer to own and lead enterprise-scale CrowdStrike Falcon implementations end-to-end. This is a hands-on technical lead / delivery role focused on designing, deploying, integrating, and optimizing Falcon across complex customer environments—plus leading troubleshooting and incident response when needed.

Location

Location: Spain (ideally Madrid)

Contract

Contract: 6 months (potential extension)

Work model

Work model: Mostly remote, with willingness to travel for occasional onsite requirements

Key responsibilities

• Lead large-scale CrowdStrike Falcon deployments (EDR/XDR) from discovery through design, build, rollout, and customer handover
• Implement and optimize Falcon Identity Protection, cloud security use cases, and LogScale (SIEM replacement) deployments
• Drive integration activities (data sources, identity, cloud telemetry, workflows) and ensure operational readiness
• Lead complex incident response, investigation, and advanced troubleshooting
• Produce high-quality documentation, runbooks, and deliver knowledge transfer so the customer can operate independently
• Support pre-sales discovery with accurate scoping, effort estimation, and delivery planning
• Contribute to building and improving a Professional Services (PS) practice (templates, repeatable approaches, lessons learned)

Professional Services (PS) delivery essentials (non-negotiable)

• Strong project delivery mindset: deliver to scope, timeline, and budget; 70–80% billable utilization expected
• Scope management: identify out-of-scope requests early and manage them professionally
• Autonomous in chaos: deliver results in imperfect environments without needing constant direction
• Customer handover = done: success means operational independence via documentation + KT, not just technical completion
• Pre-sales impacts profitability: accurate discovery and estimation are essential
• Comfortable managing 2–4 concurrent engagements at different stages
• Strong commercial awareness: balance technical excellence with pragmatic solutions that fit budget
• Think beyond one project: actively help build a scalable PS practice

Required skills & experience

• Strong expertise across:
• EDR/XDR design, rollout, and operationalization
• Identity security (Falcon Identity or equivalent identity protection concepts)
• Cloud security (AWS/Azure/GCP environments, telemetry, posture/use cases)
• LogScale deployment, onboarding, and use-case enablement (SIEM replacement experience)
• Proven ability to lead troubleshooting, incident response, and customer-facing technical leadership
• Strong communication and stakeholder management skills

Certifications

Must-have (or actively working towards):

Strongly preferred:

Nice-to-have:

• Cloud certifications (AWS / Azure / GCP)

Who you are

You’re comfortable taking ownership of complex delivery, making good decisions with incomplete information, and keeping projects commercially healthy. You can operate as the technical authority while ensuring customers are set up for long-term success.