> Markdown version of [/jobs/ext/537047-security-engineer-incident-response-crowdstrike](https://www.wearedevelopers.com/jobs/ext/537047-security-engineer-incident-response-crowdstrike). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer (Incident Response + Crowdstrike) - **Company:** Infinite Ranges - **Location:** United States (Remote available) - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Amazon Web Services, Cyber Security, Identity and Access Management, Microsoft Security Essentials, Microsoft Office, Azure Active Directory, Runbook, Security Information and Event Management, Cloud Platform System, Office365, Grafana, Falcon Platform - **Published:** June 13, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=9491cba82909e3ff ## About the Role Do you have experience in Windows support?, * 3+ years of experience in Security Operations, Incident Response, or Cybersecurity Engineering * Experience performing security alert triage and incident investigations * Hands-on experience with CrowdStrike, Microsoft Defender, Darktrace, SIEM, or related security platforms * Strong understanding of Microsoft 365 security and administration * Experience supporting Windows 10 and Windows 11 environments * Familiarity with Active Directory, Entra ID (Azure AD), and identity management * Strong written communication skills and experience creating SOPs, runbooks, or operational documentation * Ability to work independently in a fast-paced security operations environment Technologies Used in This Role * CrowdStrike * Microsoft Defender * Microsoft 365 * Office 365 * Entra ID (Azure AD) * Windows 10 / Windows 11 * Darktrace * Grafana * Active Directory * AWS Bonus Points For * Experience working in a Security Operations Center (SOC) * Microsoft Security certifications * CrowdStrike certifications * Experience supporting 24x5 or 24x7 operations * Familiarity with AWS security concepts and cloud environments * Experience developing operational playbooks, SOPs, or incident response documentation ## Description Infinite Ranges is seeking experienced Security Engineers with Incident Response, Crowdstrike, and Active Directory, Microsoft36f experience to support a customer security operations engagement. This is a short-term remote consulting engagement supporting a 24/5 security operations environment. The ideal candidate will be comfortable performing security monitoring, incident triage, investigation, documentation, and end-user security support across a Microsoft-centric environment. You will work with security monitoring and endpoint protection platforms to investigate alerts, respond to incidents, document operational procedures, and support users across Microsoft 365 technologies. What You Will Be Doing * Monitor, investigate, and triage security alerts and incidents * Perform incident response activities using security monitoring and endpoint protection tools * Analyze and respond to alerts generated from CrowdStrike, Microsoft Defender, Darktrace, Grafana, and related security platforms * Escalate security incidents and coordinate remediation efforts as needed * Document operational procedures, runbooks, and standard operating procedures (SOPs) * Support Microsoft 365 administration tasks, including user, group, and role management * Assist end users with security-related issues involving Microsoft 365 applications and services * Support Windows 10 and Windows 11 endpoint environments * Participate in incident investigations and provide detailed documentation of findings and actions taken * Collaborate with customer stakeholders to improve operational processes and security posture * Provide support for hybrid environments that may include Active Directory and AWS-based services ## Related Videos - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [5 steps for running a Kubernetes environment at scale](https://www.wearedevelopers.com/videos/88-5-steps-for-running-a-kubernetes-environment-at-scale) - [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care) - [All your telemetry data from any source in one place](https://www.wearedevelopers.com/videos/57-all-your-telemetry-data-from-any-source-in-one-place) - [Bridging AI and Nomad: a Go-based MCP Server for Cluster Control](https://www.wearedevelopers.com/videos/2063-bridging-ai-and-nomad-a-go-based-mcp-server-for-cluster-control) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)