CrowdStrike SecOps Lead Consultant

Deloitte France; Charlotte (NC); On-site; USD 105,000 - 208,000; Full time

Job summary

Deloitte's Cyber Defense & Resilience team in Charlotte seeks a CrowdStrike SecOps, Senior Consultant to design and implement Falcon Next-Gen SIEM architectures, deploy log pipelines, and optimize the Falcon platform across Windows, macOS and Linux. You will partner with SOC analysts to tune detection content, build SOAR playbooks, and guide clients on SOC maturity and incident response.

The role requires a Bachelor’s degree and 5+ years in security operations, plus hands-on CrowdStrike

Qualifications

• Bachelor's degree in computer science, cybersecurity, information systems, or equivalent work experience.
• 5+ years of experience in security operations, threat detection engineering, or enterprise information technology security.
• 3+ years of hands-on experience with CrowdStrike Falcon platform architecture, modules, and administration, including Falcon Next-Gen SIEM; Falcon Insight EDR and XDR; Falcon Fusion SOAR; Falcon Identity Protection; Falcon Intelligence; Charlotte AI; sensor deployment; policy configuration; host grouping; exclusions; and response actions.
• Experience conducting detection and response activities, including investigations, triage, host isolation, indicator blocking, and quarantine support; and applying the MITRE ATT&CK framework and Cyber Kill Chain.
• Experience using Python or another scripting language for automation and integration development.
• Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve.
• Limited immigration sponsorship may be available.

Responsibilities

• Leading the design and implementation of Falcon Next-Gen SIEM architectures, including log source onboarding, data normalization, enrichment, and correlation rule development to support enterprise threat detection and analytics.
• Leading the deployment of log-ingestion pipelines using data fabric technologies and API integrations, including Cribl, Tines, or similar technologies.
• Administering and optimizing the CrowdStrike Falcon platform, including sensor deployment, policy configuration, host grouping, exclusions, and response actions across Windows, macOS, and Linux/server environments.
• Collaborating with SOC analysts and threat detection engineers to prioritize, develop, and tune threat-detection content and use cases in CrowdStrike Falcon, including IOAs and correlation rules.
• Building and maintaining Falcon Fusion SOAR playbooks and API-based integrations to automate alert enrichment, triage, and response, while advising clients on SOC maturity and platform capabilities.

Skills

Teamwork

Communication

Attention to detail

Relationship building

Project leadership

Task management

Interpersonal skills

Timeliness

Guidance

Education

Bachelor's degree in computer science or related field

Tools

CrowdStrike Falcon

Cribl

Tines

Python

PowerShell

Job description

Deloitte's Cyber Defense & Resilience team in Charlotte seeks a CrowdStrike SecOps, Senior Consultant to design and implement Falcon Next-Gen SIEM architectures, deploy log pipelines, and optimize the Falcon platform across Windows, macOS and Linux. You will partner with SOC analysts to tune detection content, build SOAR playbooks, and guide clients on SOC maturity and incident response.

The role requires a Bachelor’s degree and 5+ years in security operations, plus hands-on CrowdStrike