Next-Gen SIEM & AI Security Consultant

ASCERA; Saint Petersburg (FL); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Quarterly Bonus

Medical/Dental/Vision

401(k) Match

Paid Time Off 30 days

Training & Certification

Job summary

SP6 is seeking a full-time consultant to join our North America services teams, focusing on Falcon NG-SIEM and AIDR with hands-on work across Fusion SOAR, Onum, and Foundry. You will be a customer-facing expert and technical resource, supporting two delivery models and leading deployments from requirements through handoff.

You will hold CrowdStrike CCFA/CCSE, have 1+ years Falcon experience including NG-SIEM, and bring 3+ years in cybersecurity, SOC operations, or incident response.

Qualifications

• Active CrowdStrike CCFA and CCSE certifications required.
• 1+ years hands-on CrowdStrike Falcon experience including NG-SIEM.
• Experience with AIDR is a plus.
• 3+ years in cybersecurity, SOC operations, or incident response.
• Knowledge of MITRE ATT&CK, NIST CSF, and incident response processes.
• Strong skills in writing queries, detections, and dashboards in CQL.

Responsibilities

• Architect, deploy, and tune Next-Gen SIEM; onboard data sources and build parsers.
• Design playbooks, workflows, and integrations in Fusion SOAR.
• Lead deployments, health checks, and migrations from requirements to handoff.
• Provide knowledge transfer and cross-training to customers and teams.
• Manage multiple customers/projects simultaneously in delivery and managed services.

Skills

CCFA

CCSE

Next-Gen SIEM

AIDR

EDR/XDR

Threat detection

Incident response

CQL

Fusion SOAR

Tools

CQL

Fusion SOAR

Onum

Foundry

Job description

SP6 is seeking a full-time consultant to join our North America services teams, focusing on Falcon NG-SIEM and AIDR with hands-on work across Fusion SOAR, Onum, and Foundry. You will be a customer-facing expert and technical resource, supporting two delivery models and leading deployments from requirements through handoff.

You will hold CrowdStrike CCFA/CCSE, have 1+ years Falcon experience including NG-SIEM, and bring 3+ years in cybersecurity, SOC operations, or incident response.