Senior CrowdStrike SecOps Consultant: Falcon NG SIEM

Deloitte France; Philadelphia (Philadelphia County); On-site; USD 105,000 - 208,000; Full time

Job summary

Deloitte's Cyber Defense & Resilience team seeks a CrowdStrike SecOps, Senior Consultant to design and deploy Falcon Next-Gen SIEM architectures, ingest logs, and tune detection across Windows, macOS, and Linux.

You will build SOAR playbooks, integrate with Cribl/Tines, collaborate with SOC analysts, and advise clients on SOC maturity while maintaining strong communication and delivery under tight deadlines.

Qualifications

• Bachelor's degree in computer science, cybersecurity, information systems, or equivalent work experience.
• 5+ years of security operations, threat detection engineering, or enterprise IT security.
• 3+ years of hands-on experience with CrowdStrike Falcon platform architecture and administration, including NG SIEM, EDR/XDR, and SOAR modules.
• Experience with MITRE ATT&CK framework and Cyber Kill Chain.
• Experience using Python or another scripting language for automation and integration.
• Ability to travel up to 50% on average.
• Limited immigration sponsorship may be available.

Responsibilities

• Design and implement Falcon Next-Gen SIEM architectures with log onboarding, data normalization, enrichment, and correlation rule development.
• Deploy log-ingestion pipelines using data fabric technologies and API integrations (Cribl, Tines, or similar).
• Administer and optimize the CrowdStrike Falcon platform across Windows, macOS, and Linux/server environments.
• Collaborate with SOC analysts to prioritize, develop, and tune threat-detection content and IOAs.
• Build and maintain Falcon Fusion SOAR playbooks and API-based integrations to automate alert enrichment, triage, and response.

Skills

Independent work

Team collaboration

Written and verbal communication

Attention to detail

Relationship building

Project leadership

Task prioritization

Interpersonal skills

Meet deadlines

Guidance to others

Education

Bachelor's degree in CS/Cybersecurity/Info Systems

Tools

CrowdStrike Falcon

Cribl

Tines

PowerShell

Python

AWS

Azure

Splunk

Cortex XSOAR

XSIAM

Job description

Deloitte's Cyber Defense & Resilience team seeks a CrowdStrike SecOps, Senior Consultant to design and deploy Falcon Next-Gen SIEM architectures, ingest logs, and tune detection across Windows, macOS, and Linux.

You will build SOAR playbooks, integrate with Cribl/Tines, collaborate with SOC analysts, and advise clients on SOC maturity while maintaining strong communication and delivery under tight deadlines.