Security Engineer - SOC - CrowdStrike - Threat Hunting - Incident Response - MITRE ATT&CK

Security Engineer - SOC - CrowdStrike - Threat Hunting - Incident Response - MITRE ATT&CK requirement for an urgent start. The Security Engineer - SOC - CrowdStrike - Threat Hunting - Incident Response - MITRE ATT&CK will be working for a major enterprise client, supporting a 24/7 Security Operations function focused on advanced threat detection, incident response and endpoint protection across a complex, global technology environment.

Security Engineer - SOC - CrowdStrike - Threat Hunting - Incident Response - MITRE ATT&CK Key Skills:

• Strong Security Operations background, with proven experience in a 24/7 SOC environment conducting L2/L3 incident analysis, containment, eradication and recovery
• Proven hands-on experience administering, configuring and tuning CrowdStrike Falcon, including detection engineering, policy management and cross-domain investigation across endpoint, identity and cloud workloads
• Experience across SIEM platforms (eg Sentinel, Splunk, QRadar) with the ability to build and refine detection use cases, dashboards and advanced hunting queries
• Strong understanding of MITRE ATT&CK, Kill Chain and STRIDE frameworks, with experience developing structured threat hunting campaigns
• Experience with endpoint security, identity and access controls (eg Entra ID, MFA, Conditional Access, PIM/JIT) across hybrid and multi-cloud environments (Azure, AWS, GCP)
• Ability to develop and maintain automated playbooks, runbooks and SOAR workflows for efficient alert handling and remediation
• Knowledge of security and compliance frameworks such as ISO 27001, NIST CSF, SOC 2 and GDPR, with experience supporting audit and assurance evidence
• Strong stakeholder management skills, working closely with engineering, compliance, vendor and senior leadership teams

Security Engineer - SOC - CrowdStrike - Threat Hunting - Incident Response - MITRE ATT&CK - Contract - Remote - Long-term Programme - Urgent Start