Senior SOC Platform Engineer (CrowdStrike Next-Gen SIEM, SOAR & EDR )

Zensar; United States; Remote; USD 120,000 - 150,000; Full time

Job summary

Zensar is seeking a security engineer to design, deploy, and optimize CrowdStrike Falcon Next-Gen SIEM environments in the United States. The role involves configuring detections, dashboards, reports, and alerting logic, and engineering Falcon Fusion SOAR workflows for automated incident response.

You will develop Python-based automation for SOC operations and threat-hunting activities, integrate third-party telemetry, and build MITRE ATT&CK aligned content while maintaining platform

Qualifications

• Experience configuring and deploying CrowdStrike Falcon Next-Gen SIEM environments.
• Ability to design detections, dashboards, reports, and alerting logic.
• Familiarity with Falcon Fusion SOAR workflows and automated incident response.

Responsibilities

• Design, deploy, manage, and optimize CrowdStrike Falcon Next-Gen SIEM environments.
• Engineer Falcon Fusion SOAR workflows for automated incident response.
• Develop Python-based automation for SOC operations and threat-hunting activities.
• Integrate third-party security telemetry and threat intelligence feeds.
• Build MITRE ATT&CK aligned detection content.

Skills

CrowdStrike Falcon

SIEM

Python

Threat Hunting

SOAR

Tools

Defender

MITRE ATT&CK

Job description

Job Description

• Design, deploy, manage, and optimize CrowdStrike Falcon Next-Gen SIEM environments.
• Configure detections, correlation rules, dashboards, reports, and alerting logic.
• Engineer Falcon Fusion SOAR workflows for automated incident response.
• Manage Falcon EDR policies, detections, investigations, and response actions.
• Develop Python-based automation for SOC operations and threat-hunting activities.
• Integrate third-party security telemetry and threat intelligence feeds.
• Build MITRE ATT&CK aligned detection content.
• Conduct proactive threat hunting using Falcon, Defender, and Notebook-based analytics.
• Support Microsoft Sentinel analytics, playbooks, data connectors, and KQL content development.
• Maintain platform documentation, SOPs, runbooks, and architecture standards.