Next-Gen SIEM Resident Consultant

🔥 6 minutes ago

🌵 Arizona – Remote

🌵 Arizona – Remote

💵 $85k - $120k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

💼 Consultant

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CrowdStrike

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 2011

🔒 Cybersecurity

☁️ SaaS

🤖 Artificial Intelligence

Cybersecurity • SaaS • Artificial Intelligence

CrowdStrike is a cybersecurity company that provides cloud-based security services to stop breaches. It is recognized as a leader in endpoint protection, identity and cloud security, and managed detection and response. CrowdStrike's platform, Falcon, integrates artificial intelligence to offer real-time visibility, detection, and protection against sophisticated cyber threats. The company is lauded for its effectiveness in securing networks and data, making it a trusted partner for businesses worldwide.

📋 Description

• Serve as the primary technical advisor for assigned strategic customer accounts • Develop and maintain trusted advisor relationships with customer security teams and leadership • Understand customer security operations workflows, use cases, and business objectives • Mentor customer teams on SIEM best practices and threat hunting techniques • Guide customers through Next-Gen SIEM deployment, configuration, and integration • Optimize data ingestion strategies and log source configurations • Design and implement custom detection rules, correlation searches, and use cases • Develop dashboards, reports, and visualizations tailored to customer requirements • Assist with migration of detection content from legacy SIEM platforms (Splunk, QRadar, etc.) • Perform health checks and platform optimization reviews • Troubleshoot complex technical issues and coordinate with engineering teams as needed • Track and report on key performance indicators and success metrics • Identify opportunities for automation and workflow improvements • Contribute to internal knowledge base and best practices documentation

🎯 Requirements

• 5+ years of experience in security operations, SIEM administration, or security engineering • Familiarity with at least one major SIEM platform (Next-Gen SIEM, LogScale, Splunk, QRadar, Sentinel, Chronicle, etc.) • Understanding of query languages (SQL, SPL, KQL, CQL, or similar) • Experience with detection engineering and correlation rule development • Knowledge of common log sources (Windows, Linux, network devices, cloud platforms) • Familiarity with scripting/automation (Python, PowerShell, Bash) • Understanding of cloud security (AWS, Azure, GCP, OCI) • Familiarity with endpoint detection and response (EDR) concepts

🏖️ Benefits

• Market leader in compensation and equity awards • Comprehensive physical and mental wellness programs • Competitive vacation and holidays for recharge • Paid parental and adoption leaves • Professional development opportunities for all employees regardless of level or role • Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections • Vibrant office culture with world class amenities • Great Place to Work Certified™ across the globe