Senior Security Engineer - Crowdstrike

UltraViolet Cyber; National Harbor (MD); Hybrid; USD 130,000 - 195,000; Full time

Benefits offered by this job

401(k) with employer match

Medical, Dental, and Vision Insurance

Group Term Life

Short-Term Disability

Long-Term Disability

Voluntary Life

Hospital Indemnity

DTO Program

11 Paid Holidays

Job summary

UltraViolet Cyber, a platform-enabled security operations company, is seeking a Senior Security Engineer with extensive CrowdStrike expertise to lead EDR operations in federal environments.

You will design CrowdStrike Falcon architecture, develop custom detection rules, and manage Falcon components across networks, ensuring compliance with NIST and FISMA. The role requires US citizenship and a hybrid on-site schedule near National Harbor, MD.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, or related field.
• CrowdStrike certification (Falcon Administrator, Falcon Responder, or equivalent).
• Demonstrated expertise implementing and managing CrowdStrike Falcon in large environments.
• Experience with CrowdStrike's detection and response capabilities, including IOA/IOC management.
• Strong understanding of endpoint security architecture in enterprise environments.
• Experience developing custom detection rules and response workflows.
• Knowledge of federal security frameworks and compliance requirements.
• Proficiency with incident response procedures and endpoint forensics.

Responsibilities

• Design and implement CrowdStrike Falcon architecture across federal networks.
• Develop and manage custom detection rules using CrowdStrike's Real-time Response and IOA platform.
• Configure and optimize CrowdStrike Falcon Prevent, Detect, and OverWatch capabilities.
• Lead threat hunting initiatives using CrowdStrike Falcon Spotlight and Falcon X threat intelligence.
• Implement CrowdStrike's identity protection and cloud workload security modules.
• Create and maintain comprehensive documentation for CrowdStrike deployments and configurations.
• Integrate CrowdStrike with existing security infrastructure for unified threat detection.
• Conduct incident response leveraging CrowdStrike Falcon forensic capabilities.
• Develop automation workflows using CrowdStrike APIs and Falcon Fusion.
• Ensure endpoint security compliance with NIST, FISMA, and agency-specific requirements.
• Provide expertise during security incidents involving endpoint compromises.

Skills

Endpoint security

CrowdStrike Falcon

Threat hunting

Incident response

Security architecture

Automation using APIs

Documentation

Education

Bachelor's degree in Cybersecurity

CrowdStrike certification (Falcon Administrator, Falcon Responder, or equivalent)

Tools

CrowdStrike Falcon

CrowdStrike Real-time Response IOA

CrowdStrike Falcon Spotlight

Falcon X

CrowdStrike APIs

Job description

Make a difference here. UltraViolet Cyber is a leading platform-enabled unified security operations company providing a comprehensive suite of security operations solutions. Founded and operated by security practitioners with decades of experience, the UltraViolet Cyber security-as-code platform combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations by eliminating risks of separate red and blue teams.

By creating continuously optimized identification, detection, and resilience from today’s dynamic threat landscape, UltraViolet Cyber provides both managed and custom-tailored unified security operations solutions to the Fortune 500, Federal Government, and Commercial clients. UltraViolet Cyber is headquartered in McLean, Virginia, with global offices across the U.S. and in India.

Our Federal Delivery team is seeking a Senior Security Engineer with extensive CrowdStrike expertise to lead endpoint detection and response (EDR) operations within federal government environments. This role will be responsible for implementing, managing, and optimizing CrowdStrike Falcon deployments to protect critical infrastructure against advanced threats and ensure compliance with federal security requirements.

What You'll Do:

• Design and implement CrowdStrike Falcon architecture across federal networks
• Develop and manage custom detection rules using CrowdStrike's Real-time Response and IOA platform
• Configure and optimize CrowdStrike Falcon Prevent, Detect, and OverWatch capabilities
• Lead threat hunting initiatives using CrowdStrike Falcon Spotlight and Falcon X threat intelligence
• Implement CrowdStrike's identity protection and cloud workload security modules
• Create and maintain comprehensive documentation for CrowdStrike deployments and configurations
• Integrate CrowdStrike with existing security infrastructure for unified threat detection
• Conduct incident response leveraging CrowdStrike Falcon forensic capabilities
• Develop automation workflows using CrowdStrike APIs and Falcon Fusion
• Ensure endpoint security compliance with NIST, FISMA, and agency-specific requirements
• Provide expertise during security incidents involving endpoint compromises

What You've Done:

• Bachelor's degree in Cybersecurity, Information Security, or related field
• 7+ years of security engineering experience with 3+ years focused on endpoint security
• CrowdStrike certification (Falcon Administrator, Falcon Responder, or equivalent)
• Demonstrated expertise implementing and managing CrowdStrike Falcon in large environments
• Experience with CrowdStrike's detection and response capabilities, including IOA/IOC management
• Strong understanding of endpoint security architecture in enterprise environments
• Experience developing custom detection rules and response workflows
• Knowledge of federal security frameworks and compliance requirements
• Proficiency with incident response procedures and endpoint forensics

Preferred Qualifications:

• Experience supporting federal agency security operations centers
• Additional security certifications (CISSP, GIAC, Security+)
• Experience with CrowdStrike's cloud workload protection capabilities
• Knowledge of CISA directives and CDM program requirements
• Background in threat hunting and advanced persistent threat detection
• Experience with security orchestration and automation platforms
• Familiarity with Zero Trust Architecture implementation

Work Environment:

• Hybrid work model with 2 day/week on-site presence near National Harbor, Maryland
• Must be able to pass a Federal background investigation - US Citizenship required
• Participation in on-call rotation for security incident response

What We Offer:

• 401(k), including an employer match of 100% of the first 3% contributed and 50% of the next 2% contributed
• Medical, Dental, and Vision Insurance (available on the 1st day of the month following your first day of employment)
• Group Term Life, Short-Term Disability, Long-Term Disability
• Voluntary Life, Hospital Indemnity, Accident, and/or Critical Illness
• Participation in the Discretionary Time Off (DTO) Program
• 11 Paid Holidays Annually

UltraViolet Cyber maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect our company's differing products, services, industries and lines of business. Candidates are typically placed into the range based on the preceding factors.

We sincerely thank all applicants in advance for submitting their interest in this position. We know your time is valuable.

UltraViolet Cyber welcomes and encourages diversity in the workplace regardless of race, gender, religion, age, sexual orientation, gender identity, disability, or veteran status.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.