Falcon Security Engineer: SIEM & AIDR Specialist

ASCERA; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salary

Quarterly bonus

Medical, dental, and vision plans

401(k) with company match

30 days paid time off

Training and Certification attainment

Career advancement

Job summary

SP6 seeks a full-time consultant in North America to drive Falcon NG-SIEM and AIDR deployments, including data onboarding, detections, and dashboards. You will support professional and managed services engagements across several customers, delivering defined milestones and knowledge transfer.

You will act as a hands-on CrowdStrike resource, guiding teams, answering technical questions, and expanding expertise across the Falcon platform while ensuring high service quality and timely delivery.

Qualifications

• Active CrowdStrike CCFA and CCSE certifications are required.
• 1+ year of hands-on CrowdStrike Falcon experience, including NG-SIEM.
• Experience with AIDR is preferred.
• 3+ years in cybersecurity with SOC operations, security engineering, threat detection, or incident response.
• Understanding of security log sources, normalization, and detection dependencies.
• Working knowledge of MITRE ATT&CK, NIST CSF, and OWASP.

Responsibilities

• Architect, deploy, and tune Next-Gen SIEM; onboard data sources and write detections and dashboards.
• Design and configure playbooks, workflows, and integrations in Fusion SOAR.
• Lead deployments, migrations, and health checks from requirements to handoff.
• Provide ongoing administration of Falcon environments, including policy and sensor management.
• Help customers adopt AIDR to secure workforce AI usage and apps.
• Share best practices and create innovative solutions to maximize customer value.
• Maintain knowledge transfer to customers and cross-train internal teams.
• Manage multiple concurrent engagements and set clear expectations.

Skills

CCFA Certification

CCSE Certification

NG-SIEM Experience

AIDR Familiarity

SOC Operations

Threat Detection

Incident Response

CQL

MITRE ATT&CK

NIST CSF

OWASP

EDR/XDR

IAM

Active Directory

Cloud Security

Multicustomer Management

Tools

CrowdStrike Falcon

Fusion SOAR

Falcon Onum

Falcon Foundry

CQL (CrowdStrike Query Language)

Job description

SP6 seeks a full-time consultant in North America to drive Falcon NG-SIEM and AIDR deployments, including data onboarding, detections, and dashboards. You will support professional and managed services engagements across several customers, delivering defined milestones and knowledge transfer.

You will act as a hands-on CrowdStrike resource, guiding teams, answering technical questions, and expanding expertise across the Falcon platform while ensuring high service quality and timely delivery.