CrowdStrike Falcon Administration

Purview Services; Gurugram District; Hybrid; INR 1,500,000 - 2,500,000; Full time

Job summary

Purview Services seeks a senior CrowdStrike Falcon Administration/Endpoint Security Engineer to architect, deploy, and manage endpoint security across enterprise environments. You will focus on Falcon and MDE, handling threat detection, policy enforcement, and incident response.

The role demands leadership in security operations, vulnerability assessments, and SOC coordination, with cross-functional collaboration to ensure robust endpoint protection across the organization.

Qualifications

• Senior endpoint security role focusing on CrowdStrike Falcon and Microsoft Defender for Endpoint (MDE).
• Deep expertise in threat detection, policy enforcement, and incident response.

Responsibilities

• Endpoint Security: Administration with CrowdStrike Falcon across OS.
• Deploy and manage Falcon sensors across diverse operating systems.
• Configure prevention policies, allowlists/blocklists, and file-path exclusions.
• Create host groups and apply RBAC.
• Monitor and troubleshoot sensor performance and connectivity.
• Conduct administrative reporting and dashboard configuration.
• Manage API keys and integration with other security platforms.
• Implement containment policies and manage quarantined files.
• MDE oversight and telemetry collection for SOC/CIRT investigations.
• Ensure integration between CrowdStrike and other tooling.
• Monitor endpoint health and performance metrics.
• Lead vulnerability scans and endpoint assessments.
• Respond to escalated incidents and coordinate with SOC teams.
• Analyze Falcon RTR activity for compliance and threat hunting.
• Develop disaster recovery plans for endpoint security platforms.

Job description

Role: CrowdStrike Falcon Administration/Endpoint Security Engineer

Experience: 7+ Years

Notice Period: Immediate to 60 Days

Location: Hyderabad & Pune

Shift Timings: 24/7- including night shifts as it is US based client

Role Summary

The Level 3 Endpoint Security Engineer is a senior technical role responsible for architecting, deploying, and managing endpoint security solutions across enterprise environments. This role demands deep expertise in CrowdStrike Falcon and Microsoft Defender for Endpoint (MDE), with a focus on advanced threat detection, policy enforcement, and incident response.

---

Key Responsibilities

• Endpoint Security_MSDefender with Crowdstrike Falcon Administaration
• Deploy and manage Falcon sensors across diverse operating systems.
• Configure prevention policies, allowlists/blocklists, and file-path exclusions.
• Create and manage host groups and apply role-based access controls.
• Monitor and troubleshoot sensor performance and connectivity issues.
• Conduct administrative reporting and dashboard configuration.
• Manage API keys and integrate Falcon with other security platforms.
• Implement containment policies and manage quarantined files.
• Microsoft Defender for Endpoint (MDE) Oversight
• Configure telemetry collection for SOC/CIRT investigations.
• Ensure seamless integration with CrowdStrike as complementary tooling.
• Monitor endpoint health and performance metrics.
• Security Operations & Incident Response
• Lead vulnerability scans and endpoint assessments.
• Respond to escalated security incidents and coordinate with SOC teams.
• Analyze audit logs and Falcon RTR activity for compliance and threat hunting.
• Develop and maintain disaster recovery plans for endpoint security platforms.