CrowdStrike Falcon Administration

Purview Services; New Delhi; Hybrid; INR 2,500,000 - 4,800,000; Full time

Job summary

Purview Services seeks a senior CrowdStrike Falcon Administration/Endpoint Security Engineer to architect, deploy, and manage endpoint security across our enterprise environments. This role emphasizes deep expertise in CrowdStrike Falcon and MDE, with a focus on advanced threat detection, policy enforcement, and incident response.

The candidate will deploy sensors, configure policies, manage RBAC, monitor performance, and lead incident response with the SOC.

Qualifications

• 7+ years of experience in endpoint security.
• Expertise in CrowdStrike Falcon and Microsoft Defender for Endpoint (MDE).
• Experience deploying sensors across diverse operating systems.
• Experience configuring prevention policies, allowlists/blocklists, and file-path exclusions.
• Experience with host groups and RBAC.

Responsibilities

• Administer CrowdStrike Falcon and Microsoft Defender for Endpoint.
• Deploy and manage Falcon sensors across OS.
• Configure prevention policies, allowlists, blocklists, and exclusions.
• Create and manage host groups and RBAC.
• Monitor sensor health and perform admin reporting.
• Manage Falcon API keys and integrations with other tools.
• Lead containment policies and quarantine management.
• Oversee MDE telemetry for investigations and SOC alignment.
• Coordinate incident response with SOC/CIRT teams.

Skills

Endpoint security

Threat detection

Incident response

Policy enforcement

Tools

CrowdStrike Falcon

Microsoft Defender for Endpoint

Job description

Role: CrowdStrike Falcon Administration/Endpoint Security Engineer

Experience: 7+ Years

Notice Period: Immediate to 60 Days

Location: Hyderabad & Pune

Shift Timings: 24/7- including night shifts as it is US based client

Role Summary

The Level 3 Endpoint Security Engineer is a senior technical role responsible for architecting, deploying, and managing endpoint security solutions across enterprise environments. This role demands deep expertise in CrowdStrike Falcon and Microsoft Defender for Endpoint (MDE), with a focus on advanced threat detection, policy enforcement, and incident response.

---

Key Responsibilities

• Endpoint Security_MSDefender with Crowdstrike Falcon Administaration
• Deploy and manage Falcon sensors across diverse operating systems.
• Configure prevention policies, allowlists/blocklists, and file-path exclusions.
• Create and manage host groups and apply role-based access controls.
• Monitor and troubleshoot sensor performance and connectivity issues.
• Conduct administrative reporting and dashboard configuration.
• Manage API keys and integrate Falcon with other security platforms.
• Implement containment policies and manage quarantined files.
• Microsoft Defender for Endpoint (MDE) Oversight
• Configure telemetry collection for SOC/CIRT investigations.
• Ensure seamless integration with CrowdStrike as complementary tooling.
• Monitor endpoint health and performance metrics.
• Security Operations & Incident Response
• Lead vulnerability scans and endpoint assessments.
• Respond to escalated security incidents and coordinate with SOC teams.
• Analyze audit logs and Falcon RTR activity for compliance and threat hunting.
• Develop and maintain disaster recovery plans for endpoint security platforms.