SecOps Consultant: SIEM, SOAR & EDR Architect

Deloitte France; United States; On-site; USD 105,000 - 208,000; Full time

Job summary

Deloitte France is seeking a CrowdStrike SecOps Senior Consultant to design and implement Falcon Next-Gen SIEM architectures, onboard log sources, and tune detections across Windows, macOS, and Linux.

You will deploy log-ingestion pipelines, administer the CrowdStrike Falcon platform, and build Falcon Fusion SOAR playbooks, advising clients on SOC maturity.

The role requires 5+ years in security operations, strong scripting skills, and ability to travel up to 50% including client sites.

Qualifications

• 5+ years in security operations, threat detection engineering, or enterprise IT security.
• 3+ years with CrowdStrike Falcon architecture, modules, and administration.
• Experience applying MITRE ATT&CK framework and Cyber Kill Chain.
• Experience scripting for automation/integration (Python or similar).
• Ability to travel up to 50% based on client work.

Responsibilities

• Design and implement Falcon Next-Gen SIEM architectures, onboard log sources, normalize data.
• Deploy log-ingestion pipelines using data fabric tech and API integrations (Cribl, Tines).
• Administer CrowdStrike Falcon platform: sensor deployment, policy config, host grouping, responses.

Skills

Independent work

Communication skills

Attention to detail

Relationship building

Project leadership

Task prioritization

Interpersonal skills

Deadline oriented

Guidance to others

Education

Bachelor's degree in CS / cybersecurity

Tools

Python

PowerShell

CrowdStrike Falcon

Cribl

Splunk

Cortex XSOAR

XSIAM

Job description

Deloitte France is seeking a CrowdStrike SecOps Senior Consultant to design and implement Falcon Next-Gen SIEM architectures, onboard log sources, and tune detections across Windows, macOS, and Linux.

You will deploy log-ingestion pipelines, administer the CrowdStrike Falcon platform, and build Falcon Fusion SOAR playbooks, advising clients on SOC maturity.

The role requires 5+ years in security operations, strong scripting skills, and ability to travel up to 50% including client sites.