Senior SecOps Architect: Next-Gen SOC & SIEM

Deloitte France; Portland (OR); On-site; USD 105,000 - 208,000; Full time

Job summary

Deloitte Cyber Defense & Resilience is seeking a CrowdStrike SecOps Senior Consultant to design and deploy Falcon Next-Gen SIEM architectures and SOAR integrations across Windows, macOS, and Linux. You will work with SOC analysts to tune detections and automate responses, driving security maturity for enterprise clients.

Bring 5+ years in security operations, strong Python scripting, and deep CrowdStrike expertise to lead projects and coordinate with clients. Travel up to 50% may be required.

Qualifications

• Bachelor’s degree in computer science, cybersecurity, information systems, or equivalent work experience.
• 5+ years of experience in security operations, threat detection engineering, or enterprise information technology security.
• 3+ years of hands-on experience with CrowdStrike Falcon platform architecture, modules, and administration, including Falcon Next-Gen SIEM; Falcon Insight EDR and XDR; Falcon Fusion SOAR; Falcon Identity Protection; Falcon Intelligence; Charlotte AI; sensor deployment; policy configuration; host grouping; exclusions; and response actions.
• Experience conducting detection and response activities, including investigations, triage, host isolation, indicator blocking, and quarantine support; and applying the MITRE ATT&CK framework and Cyber Kill Chain.
• Experience using Python or another scripting language for automation and integration development.
• Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve.
• Limited immigration sponsorship may be available.

Responsibilities

• Lead the design and implementation of Falcon Next-Gen SIEM architectures, including log source onboarding, data normalization, enrichment, and correlation rule development to support enterprise threat detection and analytics.
• Lead the deployment of log-ingestion pipelines using data fabric technologies and API integrations, including Cribl, Tines, or similar technologies.
• Administering and optimizing the CrowdStrike Falcon platform, including sensor deployment, policy configuration, host grouping, exclusions, and response actions across Windows, macOS, and Linux/server environments.
• Collaborating with SOC analysts and threat detection engineers to prioritize, develop, and tune threat-detection content and use cases in CrowdStrike Falcon, including IOAs and correlation rules.
• Building and maintaining Falcon Fusion SOAR playbooks and API-based integrations to automate alert enrichment, triage, and response, while advising clients on SOC maturity and platform capabilities.

Skills

CrowdStrike Falcon

SOAR automation

Threat detection

Python scripting

Data integration

Log analytics

SOC operations

Project leadership

MITRE ATT&CK

Education

Bachelor's degree

Cybersecurity degree

Tools

Cribl

PowerShell

Splunk

Cortex XSOAR

XSIAM

BindPlane

Job description

Deloitte Cyber Defense & Resilience is seeking a CrowdStrike SecOps Senior Consultant to design and deploy Falcon Next-Gen SIEM architectures and SOAR integrations across Windows, macOS, and Linux. You will work with SOC analysts to tune detections and automate responses, driving security maturity for enterprise clients.

Bring 5+ years in security operations, strong Python scripting, and deep CrowdStrike expertise to lead projects and coordinate with clients. Travel up to 50% may be required.