Senior Security Engineer - Crowdstrike

Lead cross-tool security engineering efforts, advising on best practices for closing detection and reporting gaps that span multiple platforms

Diagnose and resolve reporting and visibility gaps created when a tool in the environment is deprecated, replaced, or reconfigured — for example, reconstructing lost reporting coverage by combining endpoint telemetry with Splunk data

Design, implement, and document data flows and integration points across endpoint protection, SIEM, and other security tools supporting the program

Build and tune detection logic, correlation searches, and dashboards that hold up as individual tools in the stack change, are replaced, or are retired

Lead the technical transition work when a security tool is deprecated, replaced, or reconfigured, ensuring no loss of detection or reporting coverage

Integrate tools such as CrowdStrike, Splunk, Cribl, CyberArk, Suricata, Tenable, Tanium, Thales, CASB, Trellix, Axonius, and others to close cross-platform visibility gaps

Develop automation and correlation workflows using APIs across the security tool stack to reduce manual reporting and analysis work

Support threat hunting and incident response efforts that require correlating evidence across more than one tool or data source

Support endpoint and platform security compliance with NIST, FISMA, and agency-specific requirements

Maintain current, accurate documentation of tool configurations, data flows, and integration architecture across the stack

Serve as the team's point of contact for cross-tool security engineering issues

Ability to attain DHS EOD

Master's degree or equivalent, plus 12 years of relevant experience

Demonstrated, hands-on experience across more than one security tool category (endpoint/EDR, SIEM, vulnerability management, network detection, or similar)