CroudStrike Architect

Serve as the highest technical escalation (Tier 3) and lead architect for the CrowdStrike Falcon EDR/XDR platform, responsible for enterprise architecture, administration, advanced threat response, platform optimization, and security integrations across multi-tenant environments.

Key Responsibilities

• Architect, deploy, and manage CrowdStrike Falcon across multi-tenant environments.
• Lead Tier 3 response for advanced endpoint threats, malware, and zero-day incidents using RTR and threat hunting.
• Develop and optimize detection rules, policies, and platform performance.
• Integrate Falcon with SIEM, SOAR, threat intelligence, and automation platforms.
• Build dashboards, APIs, and workflows to improve visibility and automate security operations.
• Create SOPs, mentor SOC analysts, and collaborate with CrowdStrike support and internal stakeholders.

Required Experience

• 4+ years managing CrowdStrike Falcon in enterprise environments (10,000+ endpoints).
• Expertise with Falcon RTR, custom IOAs/IOCs, endpoint threat hunting, and incident response.
• Strong Windows, Linux, macOS, PowerShell, Python, and Bash skills.
• Experience with SIEM/SOAR, IAM, vulnerability management, and the MITRE ATT&CK framework.

Preferred Certifications

• CrowdStrike CCFA, CCFR, or CCFH
• CISSP, GCIH, GCFA, GSEC, CISA, or equivalent

Preferred Qualifications

• Government or large enterprise security experience.
• Experience integrating CrowdStrike with Splunk, Microsoft Sentinel, or Palo Alto Cortex.
• Familiarity with NIST 800-53, CJIS, HIPAA, and IRS Pub 1075.