Next-Gen SIEM Resident Consultant

🕒 il y a 13 jours

🌵 Arizona – Distant

🌵 Arizona – Remote

💵 $85 000 - $120 000 / an

⏰ Temps Plein

🟡 Intermédiaire

🟠 Senior

💼 Consultant

🦅 Parrain de Visa H1B

Cette entreprise a parrainé des visas H1B par le passé.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

CrowdStrike

Site WebLinkedInTous les Emplois

5001 - 10000 employés

Fondée en 2011

🔒 Cybersecurity

☁️ SaaS

🤖 Intelligence artificielle

Cybersecurity • SaaS • Artificial Intelligence

CrowdStrike est une société de cybersécurité qui fournit des services de sécurité cloud pour mettre fin aux intrusions. Reconnue comme un leader de la protection des endpoints, de la sécurité des identités et du cloud, et du Managed Detection and Response (MDR), CrowdStrike propose la plateforme Falcon, qui intègre l’intelligence artificielle pour offrir une visibilité, une détection et une protection en temps réel contre des cybermenaces sophistiquées. L’efficacité de l’entreprise à sécuriser les réseaux et les données en fait un partenaire de confiance pour les entreprises du monde entier.

Description

• Serve as the primary technical advisor for assigned strategic customer accounts • Develop and maintain trusted advisor relationships with customer security teams and leadership • Understand customer security operations workflows, use cases, and business objectives • Mentor customer teams on SIEM best practices and threat hunting techniques • Guide customers through Next-Gen SIEM deployment, configuration, and integration • Optimize data ingestion strategies and log source configurations • Design and implement custom detection rules, correlation searches, and use cases • Develop dashboards, reports, and visualizations tailored to customer requirements • Assist with migration of detection content from legacy SIEM platforms (Splunk, QRadar, etc.) • Perform health checks and platform optimization reviews • Troubleshoot complex technical issues and coordinate with engineering teams as needed • Track and report on key performance indicators and success metrics • Identify opportunities for automation and workflow improvements • Contribute to internal knowledge base and best practices documentation

🎯 Exigences

• 5+ years of experience in security operations, SIEM administration, or security engineering • Familiarity with at least one major SIEM platform (Next-Gen SIEM, LogScale, Splunk, QRadar, Sentinel, Chronicle, etc.) • Understanding of query languages (SQL, SPL, KQL, CQL, or similar) • Experience with detection engineering and correlation rule development • Knowledge of common log sources (Windows, Linux, network devices, cloud platforms) • Familiarity with scripting/automation (Python, PowerShell, Bash) • Understanding of cloud security (AWS, Azure, GCP, OCI) • Familiarity with endpoint detection and response (EDR) concepts

🏖️ Avantages

• Market leader in compensation and equity awards • Comprehensive physical and mental wellness programs • Competitive vacation and holidays for recharge • Paid parental and adoption leaves • Professional development opportunities for all employees regardless of level or role • Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections • Vibrant office culture with world class amenities • Great Place to Work Certified™ across the globe