Hybrid CrowdStrike Falcon Platform Engineer (MDR)

IBM; Taguig; Hybrid; PHP 900,000 - 1,500,000; Full time

Job summary

IBM Consulting in the Philippines seeks a Security Specialist to own the CrowdStrike Falcon environment, ensuring health, policy optimization, and smooth integration with the CrowdStrike Falcon Complete team. This role bridges our Managed SOC and security operations, delivering precise remediation and proactive threat defense.

Strong Windows/Linux/macOS knowledge, SIEM/EDR/MDR experience, and scripting in PowerShell or Python are highly valued.

Qualifications

• Deep technical experience managing CrowdStrike Falcon: Console management, policy grouping, sensor troubleshooting.
• Strong understanding of Windows/Linux/macOS system processes, registry keys, and file systems to analyze malware behavior.
• Familiarity with how endpoints interact with SOAR/SIEM/EDR/MDR and cloud, including firewall needs for sensor telemetry.

Responsibilities

• Act as the primary technical POC for CrowdStrike Falcon Complete; validate findings, coordinate remediation, escalate incidents.
• Monitor sensor health to identify inactive or outdated agents and address issues.
• Audit global and group-level exclusions; minimize blind spots and reduce false positives to improve SOC productivity.
• Manage Falcon Fusion workflows and Real-Time Response capabilities.
• Configure and maintain prevention policies, fine-tune exclusions while maintaining strong security posture.
• Develop monthly platform reports for leadership detailing deployment gaps and service usage.
• Own end-to-end health of the Falcon platform, including sensor lifecycle and kernel-level troubleshooting.

Skills

CrowdStrike Falcon

Windows OS

Linux OS

macOS

SOAR/SIEM/MDR

Cloud security

Firewall basics

PowerShell

Python

Education

Bachelor's Degree

Tools

CrowdStrike Console

PowerShell

Python

SIEM integration

Job description

IBM Consulting in the Philippines seeks a Security Specialist to own the CrowdStrike Falcon environment, ensuring health, policy optimization, and smooth integration with the CrowdStrike Falcon Complete team. This role bridges our Managed SOC and security operations, delivering precise remediation and proactive threat defense.

Strong Windows/Linux/macOS knowledge, SIEM/EDR/MDR experience, and scripting in PowerShell or Python are highly valued.