SecOps Lead: Next-Gen SIEM & SOAR Architect

Deloitte France; Jacksonville (FL); Vor Ort; USD 105.000 - 208.000; Vollzeit

Zusammenfassung

Deloitte's Cyber Defense & Resilience team seeks a CrowdStrike SecOps Senior Consultant to design and implement Falcon Next-Gen SIEM architectures and deploy log pipelines. You will optimize the Falcon platform across Windows, macOS, and Linux environments while collaborating with SOC analysts to enhance threat detection content.

The role requires 5+ years in security operations, 3+ years with CrowdStrike Falcon, and up to 50% travel; a CCFA/CCFR/CCSP or similar is preferred.

Qualifikationen

• Bachelor's degree in computer science, cybersecurity, information systems, or equivalent work experience.
• 5+ years of experience in security operations, threat detection engineering, or enterprise information technology security.
• 3+ years of hands-on experience with CrowdStrike Falcon platform architecture, modules, and administration, including Falcon Next-Gen SIEM; Falcon Insight EDR/XDR; Falcon Fusion SOAR; Falcon Identity Protection; Falcon Intelligence; Charlotte AI; sensor deployment; policy configuration; host grouping; exclusions; and response actions.
• Experience conducting detection and response activities, including investigations, triage, host isolation, indicator blocking, and quarantine support; and applying the MITRE ATT&CK framework and Cyber Kill Chain.
• Experience using Python or another scripting language for automation and integration development.
• Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve.
• Limited immigration sponsorship may be available.

Aufgaben

• Leading the design and implementation of Falcon Next-Gen SIEM architectures, including log source onboarding, data normalization, enrichment, and correlation rule development to support enterprise threat detection and analytics.
• Leading the deployment of log-ingestion pipelines using data fabric technologies and API integrations, including Cribl, Tines, or similar technologies.
• Administering and optimizing the CrowdStrike Falcon platform, including sensor deployment, policy configuration, host grouping, exclusions, and response actions across Windows, macOS, and Linux/server environments.
• Collaborating with SOC analysts and threat detection engineers to prioritize, develop, and tune threat-detection content and use cases in CrowdStrike Falcon, including IOAs and correlation rules.
• Building and maintaining Falcon Fusion SOAR playbooks and API-based integrations to automate alert enrichment, triage, and response, while advising clients on SOC maturity and platform capabilities.

Kenntnisse

Python scripting

Communication skills

Team collaboration

Project leadership

Fast-paced environment management

Ausbildung

Bachelor's degree in computer science, cybersecurity, information systems, or equivalent work experience

Tools

CrowdStrike Falcon

Cribl

Tines

Bindplane

Jobbeschreibung

Deloitte's Cyber Defense & Resilience team seeks a CrowdStrike SecOps Senior Consultant to design and implement Falcon Next-Gen SIEM architectures and deploy log pipelines. You will optimize the Falcon platform across Windows, macOS, and Linux environments while collaborating with SOC analysts to enhance threat detection content.

The role requires 5+ years in security operations, 3+ years with CrowdStrike Falcon, and up to 50% travel; a CCFA/CCFR/CCSP or similar is preferred.