> Markdown version of [/jobs/ext/4448815-security-engineer-crowdstrike](https://www.wearedevelopers.com/jobs/ext/4448815-security-engineer-crowdstrike). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer, CrowdStrike - **Company:** ASCERA, LLC - **Location:** St. Petersburg, FL, United States - **Contract:** Permanent contract - **Skills:** Active Directory, Artificial Intelligence, Cloud Computing Security, Cyber Security, Database Queries, Query Languages, Domain Name System (DNS), Identity and Access Management, Intrusion Detection and Prevention, Intrusion Detection Systems, Open Web Application Security, Security Log, Security Information and Event Management, Systems Integration, Mitre Att&ck, Firewalls (Computer Science), National Institute of Standards and Technology Cybersecurity Framework, Falcon Platform - **Published:** October 14, 2026 - **Apply:** https://www.careerjet.com/jobad/us2478697f6c3e1b5e8dc04080966238c5 ## About the Role * Hold active CrowdStrike certifications: CrowdStrike Certified Falcon Administrator (CCFA) and CrowdStrike Certified SIEM Engineer (CCSE) * 1+ years of hands-on CrowdStrike Falcon experience, including Next-Gen SIEM * Preferably has experience with AIDR * 3+ years of cybersecurity experience, preferably in SOC operations, security engineering, threat detection, or incident response * Understanding of security log sources, normalization, correlation, and detection dependencies. * Working knowledge of MITRE ATT&CK, NIST CSF, OWASP and incident response processes * Strong understanding of security technologies: EDR/XDR, firewalls, IDS/IPS, WAF, DNS, proxy, IAM, Active Directory, and cloud security. * Experience writing queries, detections, and dashboards in CrowdStrike Query Language (CQL) * Experience in requirements gathering, documenting requirements, requirement analysis, and testing * Proven ability to manage multiple customers or projects at the same time, in a project-based or ongoing managed services setting * Excellent verbal and written communication skills, including explaining technical topics to non-technical audiences ## Description You'll support customers through two delivery models, often working with several customers at once: * Professional services: * Residency engagements: longer-term engagements embedded with a customer, typically lasting from a few months to a year * Outcome-based engagements: project work with defined milestones and deliverables delivered within an agreed timeline * Managed services: ongoing, recurring support in which SP6 operates and maintains the customer's Falcon environment as an extension of their security team * Architect, deploy, and tune Next-Gen SIEM: onboard data sources, build parsers, write detections and dashboards, and support migrations from other SIEMs * Help customers adopt AIDR (Guardian) to secure workforce AI usage and in-house AI applications and agents * Design and configure playbooks, workflows, and integrations in Fusion SOAR * Design and configure in Falcon Onum listeners, pipelines and datasinks * Design and configure custom apps for custom applications using Falcon Foundry * Lead deployments, migrations, health checks, and outcome-based projects from requirements gathering through handoff * Provide ongoing administration of customers' Falcon environments, including policy and sensor management, detection tuning, platform health monitoring, and regular reporting against service levels * Leverage previous experience, share best practices, and create innovative solutions that maximize customers' value from Falcon and aid in user adoption * Provide knowledge transfer to customers throughout each engagement * Serve as a hands-on CrowdStrike resource for our internal team, answering technical questions and cross-training colleagues * Manage your time across multiple concurrent customers, setting clear expectations and keeping each engagement moving * Develop and continually extend expertise across the Falcon platform and the broader security landscape, SP6 ensures that organizations get Beyond the Buzzwords ® and delivers Expert Services centered around (3) convergent areas: AI Governance, AI Security, and AI Systems Resiliency. SP6 leads organizational initiatives around: * AI Governance, Risk & Compliance Services * Establishing and enhancing controls around the safe use of AI via Subject Matter Experts on leading industry frameworks including ISO 42001, NIST AI RMF, and CSA AI Control Matrix. * Evaluating organizations' adherence to these standards, whether that be for self-monitoring of controls to mitigate risk or adherence to regulatory requirements including the EU AI Act, various state insurance regulation tied to the NAIC Model Bulletin, and other statutory requirements. * AI Security * Hands-on implementation (tooling, training, technical controls) to operationalize organizational standards. * This technical tool advisement and configuration work becomes both the connective tissue to policy as well as the assurance of risk mitigation, from monitoring AI usage (both sanctioned and shadow) and configuring network, endpoint, DLP, SIEM, and other tools with practical defensive security measures. * AI System Resiliency * Ensuring that systems or services that are AI-led are behaving as expected, providing an uninterrupted and seamless user experience. * This practice area also assists clients with managing and reducing unnecessary AI token spend. These services co-exist with legacy expertise and services from SP6 in the Security Operations (SIEM), as the SIEM is an organization's primary tool for security detection and analysis; as well as our existing Cyber Compliance expertise in Cyber Risk & Compliance (CRC) services.