CrowdStrike Engineer

CrowdStrike Engineer

Hybrid - Skokie, Arlington Heights, or Warrenville - IL (Partial Remote)

Contract to hire

Job Summary:

As the Security Engineer II CrowdStrike Subject Matter Expert, you will be the lead engineer and in-house expert for the organization's CrowdStrike platform. You will own the configuration, protection policies and ongoing improvement of CrowdStrike across the enterprise. This is a hands-on engineering role, not an incident response role. The ideal candidate has configured policies, led rollouts, moved environments to stricter policies and set up the platform's various components. They have not only used CrowdStrike to resolve alerts.

A key focus of this role is leading the rollout of CrowdStrike Guardian, CrowdStrike's new AI detection and response tool for data loss prevention (DLP) and AI protection. Guardian will replace the current DLP agent. The rollout has already started with a pilot alongside the End-User Computing team. You will also work closely with the organization's managed security services provider (MSSP), which co-manages the environment, and you will support the enterprise email security program on Microsoft E5.

In addition, you will help improve the organization's cybersecurity posture and keep watch over its data, systems and resources. You will help carry out the enterprise security strategy, create security policies and standards, review systems for compliance, and support risk management, governance and incident response. Responsibilities include maintaining alignment with HIPAA, PCI and other applicable laws, regulations and standards.

What you will do:

• Serve as the lead engineer and subject matter expert for the CrowdStrike platform, owning all protection policies, platform configuration and component setup.
• Lead the rollout of CrowdStrike Guardian for data loss prevention and AI protections, including pilot activities with End-User Computing and the transition off the current DLP agent.
• Design, configure, tune and move CrowdStrike policies to more stringent security standards over time, balancing protection with business and clinical operations.
• Plan and carry out CrowdStrike deployments, rollouts and configuration changes across the enterprise.
• Partner with the organization's MSSP, which co-manages the environment. Direct configuration changes and review alerts escalated by the MSSP.
• Support enterprise email security using Microsoft E5, including making sure email authentication standards such as SPF, DKIM and DMARC are properly configured and maintained.
• Identify threats and vulnerabilities. Conduct complex security incident reviews and investigations, and support incident response and recovery activities.