SOC Specialist

Role: & Security Operations Lead-CrowdStrike EDR / SOC Specialist (CrowdStrike Falcon EDR / Tier 1 & 2 Fraud / ATO / PingID & PingFederate / Detection Engineering)
Location: Chattanooga, TN (100% Onsite)
Duration: 6 Months Contract (Start: 11/04/2026 - End: 05/04/2027)
Pay Rate: $68.00/hr W2 | $80.00/hr C2C Max

Professional Job Description
Seeking a senior-level CrowdStrike EDR & Security Operations Lead with 10+ years of dedicated cybersecurity, endpoint protection, and security operations experience for a 6-month contract role located in Chattanooga, TN (100% Onsite).
The candidate will take full operational ownership of monitoring, investigating, and triaging CrowdStrike Falcon EDR detections, Tier 1/Tier 2 fraud events, Account Takeover (ATO) threats, and identity security incidents.
This role requires deep hands-on expertise with CrowdStrike Endpoint Detection and Response (EDR), PingID, and PingFederate, as well as a strong background in detection rule optimization, false-positive reduction, and audit-ready case documentation.

#Key Responsibilities
EDR Monitoring & Triage: Monitor, analyze, and remediate real-time CrowdStrike Falcon detections, endpoint threats, and anomalous host activity across enterprise endpoints.
Fraud & Identity Investigation: Conduct Tier 1 and Tier 2 investigations forChattanooga, TN Account Takeover (ATO), credential abuse, and identity threats utilizing PingID and PingFederate access logs.
Detection Engineering & Optimization: Develop, test, and tune custom detection rules and alert logic within CrowdStrike to enhance coverage and minimize false positives.
Incident Response & Case Management: Perform end-to-end incident handling, root cause analysis, threat escalation, and maintain audit-compliant documentation.
Metrics & Process Improvement: Track security operations metrics, trend analysis, and continuous improvement of SOC monitoring protocols within a risk-based framework.

#Required Qualifications
Core Experience: 10+ years of progressive experience in Cybersecurity, SOC Operations, Incident Response, and Endpoint Security.
Primary Tech Stack: Extensive hands-on mastery of CrowdStrike Endpoint Detection and Response (EDR) platform.
Identity & Access Management Integration: Demonstrated experience with PingID and PingFederate authentication workflows and log analysis.
Threat Domains: Proven track record handling Account Takeover (ATO), identity fraud, endpoint malware, and SOC Tier 1/2 triage.
Work Setup & Location: Must commit to 100% Onsite work in Chattanooga, TN.