Sr. CrowdStrike Engineer (Endpoint Security) - Hybrid

5+ years of experience configuring and maturing endpoint security programs, with at least 3 years of hands-on expertise in CrowdStrike Falcon (including EDR, Identity Protection, Data Protection, Exposure Management, SaaS Security, NG-SIEM, Fusion, CWP, or FIM).Proven track record of deploying, configuring, and tuning CrowdStrike agents across enterprise environments (Windows, macOS, Linux).Strong understanding of endpoint detection and response (EDR), threat hunting, IOC/IOA development, and real-time response (RTR).Experience writing and updating queries using CrowdStrike Query Language, or similar SIEM query language such as Splunk. Experience integrating CrowdStrike with SIEM/SOAR platforms.

• Experience integrating multiple security tools to provide enhanced visibility and monitoring capabilities.
• Experience developing advanced workflows leveraging the CrowdStrike platform.
• Ability to leverage CrowdStrike telemetry to support incident response investigations.
• Comfortable collaborating with SOC, threat intel, and infrastructure teams to refine detection logic and reduce false positives.
• Knowledge of MITRE ATT&CK, malware behaviors, and threat actor TTPs as they relate to endpoint security.
• Advanced experience with scripting (PowerShell, Python, Bash) for automation and custom response actions.
• Develop and report enterprise level metrics for endpoint security controls.
• Architect solutions (initial state, transition, final state architectures).
• Provide compliance and audit evidence for monitored systems.
• Document, publish, and maintain a knowledge base of information pertaining to the functionality, processes, and procedures related to the supported tools.One or more endpoint security related technologies
  • CrowdStrike
  • SIEM/SOAR
  • DLP
  • FIM
  • Red Team
  • Penetration testing
  • Incident management and responseQualifications
    • More than 7 years of progressive experience in cybersecurity engineering
    • CrowdStrike certifications (e.g., CCFR, CCFP) are highly desirable
    • Advanced experience administering and managing CrowdStrike environments, including Data Protection, Identity Protection, FIM, Next-Gen SIEM, Cloud Security, and Fusion Workflows
    • Ability to identify security risks and weaknesses and provide security mitigation and remediation recommendations
    • Demonstrated experience and expertise with multiple security controls within multiple security domains
    • Bachelor's Degree in Computer Science, Engineering, or related field required
    • CISSP, CISM, or other relevant information security industry recognized certification preferred -
      What's in it for youAt Schwab, we're committed to empowering our employees' personal and professional success. Our purpose-driven, supportive culture, and focus on your development means you'll get the tools you need to make a positive difference in the finance industry. Our approach balances our ongoing commitment to workplace flexibility, serving our clients, and our strong belief in the value of being together in person on a regular basis.We offer a competitive that takes care of the whole you - both today and in the future:
      • 401(k) with company match and Employee stock purchase plan
      • Paid time for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positions
      • Paid parental leave and family building benefits
      • Tuition reimbursement
      • Health, dental, and vision insurance

Didn't find what you're looking for? Search again!

I'm looking for

in category

Engineering Human Resources Legal Other Accounting, Auditing Executive IT / Software / Systems Hospitality & Tourism Administration, Clerical Design, Graphic Design & CAD Sales ALL

within

5 Miles of Omaha 10 Miles of Omaha 25 Miles of Omaha 50 Miles of Omaha 100 Miles of Omaha 250 Miles of Omaha

• Let Papillion recruiters find you. Post your resume for free!
• Get Papillion Engineering jobs via email.


• View more Omaha Engineering jobs