CrowdStrike Falcon Administration

Purview Services; Ghaziabad District; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Purview Services is seeking a Level 3 Endpoint Security Engineer to architect, deploy, and manage endpoint security across enterprise environments, with deep expertise in CrowdStrike Falcon and Microsoft Defender for Endpoint.

This senior role focuses on advanced threat detection, policy enforcement, incident response, and seamless integration of Falcon with other security platforms, while supporting 24/7 US-based client operations.

Qualifications

• 7+ years of experience in endpoint security engineering.
• Expertise in deploying and managing CrowdStrike Falcon and MDE.
• Experience with policy enforcement, threat detection, and incident response.

Responsibilities

• Administer CrowdStrike Falcon and Defender for Endpoint across enterprise environments.
• Deploy and manage Falcon sensors across diverse OSes.
• Configure prevention policies, allowlists/blocklists, and file-path exclusions.
• Create and manage host groups and apply RBAC.
• Monitor and troubleshoot sensor performance and connectivity.
• Conduct admin reporting and dashboard configuration.
• Manage API keys and integrate Falcon with other security platforms.
• Implement containment policies and manage quarantined files.
• Oversee Microsoft Defender for Endpoint (MDE).
• Configure telemetry collection for SOC/CIRT investigations.
• Coordinate with SOC teams during incidents.
• Analyze audit logs and Falcon RTR activity for compliance and threat hunting.
• Develop disaster recovery plans for endpoint security platforms.

Skills

CrowdStrike Falcon

Microsoft Defender for Endpoint

Endpoint security

Threat detection

Incident response

Falcon Console

Job description

Role Summary

The Level 3 Endpoint Security Engineer is a senior technical role responsible for architecting, deploying, and managing endpoint security solutions across enterprise environments. This role demands deep expertise in CrowdStrike Falcon and Microsoft Defender for Endpoint (MDE), with a focus on advanced threat detection, policy enforcement, and incident response.

Role Details

Role: CrowdStrike Falcon Administration/Endpoint Security Engineer

Experience: 7+ Years

Notice Period: Immediate to 60 Days

Location: Hyderabad & Pune

Shift Timings: 24/7- including night shifts as it is US based client

Key Responsibilities

• Endpoint Security_MSDefender with Crowdstrike Falcon Administaration
• Deploy and manage Falcon sensors across diverse operating systems.
• Configure prevention policies, allowlists/blocklists, and file-path exclusions.
• Create and manage host groups and apply role-based access controls.
• Monitor and troubleshoot sensor performance and connectivity issues.
• Conduct administrative reporting and dashboard configuration.
• Manage API keys and integrate Falcon with other security platforms.
• Implement containment policies and manage quarantined files.
• Microsoft Defender for Endpoint (MDE) Oversight
• Configure telemetry collection for SOC/CIRT investigations.
• Ensure seamless integration with CrowdStrike as complementary tooling.
• Monitor endpoint health and performance metrics.
• Security Operations & Incident Response
• Lead vulnerability scans and endpoint assessments.
• Respond to escalated security incidents and coordinate with SOC teams.
• Analyze audit logs and Falcon RTR activity for compliance and threat hunting.
• Develop and maintain disaster recovery plans for endpoint security platforms.