Infra Security SME / Cyber security

Cerebra Consulting, Inc.; United Kingdom; On-site; GBP 80,000 - 100,000; Full time

Job summary

A cybersecurity consulting firm based in the United Kingdom is looking for an experienced Infra Security SME with over 10 years of expertise in cyber security. The role involves designing and implementing security measures, deploying Falcon agents, and configuring alert rules in Sentinel. The ideal candidate will have strong skills in logging configuration and documentation while contributing to a secure environment. A thorough understanding of CrowdsStrike and relevant technologies is essential.

Qualifications

• 10+ years of experience in Cyber security.
• Expertise in designing and implementing Security Agents.
• Experience with endpoint security and incident response.

Responsibilities

• Configure and ensure availability of required logs into Sentinel.
• Plan and deploy Falcon agents on relevant endpoints.
• Document deployment steps and configurations.

Skills

Cyber security expertise

EDR deployment planning

Integration with Sentinel

Incident response workflows

Documentation skills

Tools

CrowdStrike

Sentinel

Qualys

Job description

Infra Security SME

Role: 10+ years of experience in Cyber security Designing & implementation of Security Agents, Development, Security agent migration, Physical Security exploitation and design flaw addressment & Endpoint Security.

Key Responsibilities

• Configure & ensure availability of required logs into Sentinel (such as EDR, Qualys, Firewalls etc)
• EDR Deployment Planning: Assess the lab infrastructure and endpoints to determine deployment scope and strategy.
• Plan for agent installation, network requirements, and compatibility with existing systems.
• Deploy Falcon agents on chosen relevant endpoints.
• Tune settings to minimize false positives while maintaining strong security posture.
• Work with SOC consultant to configure alert rules and incident response workflows in Sentinel based on CrowdStrike telemetry.
• Simulate endpoint threats to validate EDR detection and SIEM alerting.
• Test Crowd strikes performance against the OT security visibility and threat protection use cases.
• Set up data connectors between CrowdStrike and Sentinel using APIs or native integrations.
• Documentation & reporting: Document deployment steps, configurations and integration details.