Cybersecurity Analyst – CrowdStrike NG SIEM SME

Diverse Lynx; Chicago (IL); Remote; USD 100,000 - 130,000; Full time

Job summary

A leading IT services company is seeking a Cybersecurity Analyst to lead the design and deployment of CrowdStrike SIEM capabilities. The ideal candidate has over 5 years of experience in SIEM engineering and deep expertise in CrowdStrike technologies. Responsibilities include architectural optimization and advanced threat detection. Opportunities for remote work available.

Qualifications

• 5+ years of experience in SIEM engineering, security architecture, or threat detection.
• Deep expertise in CrowdStrike Falcon, Falcon LogScale, and NGSIEM technologies.
• Strong understanding of log management, query languages, and data modeling.
• Familiarity with cloud security (AWS, Azure, GCP) and identity integrations.

Responsibilities

• Serve as the SME for CrowdStrike Falcon LogScale and NGSIEM implementations.
• Architect and optimize log ingestion pipelines, data normalization, and retention strategies.
• Develop advanced queries, dashboards, and alerting rules for threat detection.
• Conduct threat hunting, incident analysis, and forensic investigations.

Skills

CrowdStrike NG SIEM

CrowdStrike Falcon

SOC

Incident Response

Job description

Cybersecurity Analyst – CrowdStrike NG SIEM SME

Remote

Top skills

• CrowdStrike NG SIEM
• CrowdStrike Falcon, Falcon LogScale
• SOC, Incident Response

Job Description / Responsibilities

Highly experienced CrowdStrike NGSIEM Subject Matter Expert (SME) to lead the design, deployment, and optimization of CrowdStrike Falcon LogScale and related Next-Gen SIEM capabilities. This role will serve as the technical authority on log ingestion, threat detection, and SIEM architecture, supporting both strategic initiatives and operational excellence.

Key Responsibilities:

• Serve as the SME for CrowdStrike Falcon LogScale and NGSIEM implementations.
• Architect and optimize log ingestion pipelines, data normalization, and retention strategies.
• Develop advanced queries, dashboards, and alerting rules for threat detection and compliance.
• Guide integration of Falcon NGSIEM with other tools (EDR, SOAR, cloud platforms, identity systems).
• Conduct threat hunting, incident analysis, and forensic investigations using CrowdStrike telemetry.
• Collaborate with SOC, IR, and engineering teams to improve detection and response workflows.
• Provide training and mentorship to analysts and engineers on NGSIEM capabilities.
• Stay current with CrowdStrike product updates, threat trends, and SIEM best practices.

Required Qualifications

• 5+ years of experience in SIEM engineering, security architecture, or threat detection.
• Deep expertise in CrowdStrike Falcon, Falcon LogScale, and NGSIEM technologies.
• Strong understanding of log management, query languages, and data modeling.
• Experience with MITRE Telecommunication&CK, threat intelligence, and incident response frameworks.
• Familiarity with cloud security (AWS, Azure, GCP) and identity integrations.
• Excellent communication and documentation skills.

Diverse Lynx LLC is an Equal Employment Opportunity employer. All qualified applicants will receive due consideration for employment without any discrimination. All applicants will be evaluated solely on the basis of their ability, competence and their proven capability to perform the functions outlined in the corresponding role. We promote and support a diverse workforce across all levels in the company.