CrowdStrike SIEM Engineer (CCSE Certified)

MUST HAVE Certified Crowdstrike CCSE

Responsible for administration and tuning of Crowdstrike SIEM that is already installed. Very large implementation. Part of a team.

They said they strongly prefer certified (almost a 100% must have to win this role).

Job Description:

Administer, maintain, and optimize a large‐scale CrowdStrike SIEM implementation already deployed in production.

• Perform continuous SIEM tuning, including rule refinement, alert noise reduction, correlation logic updates, and detection enhancement.
• Monitor system health, ingestion pipelines, data flows, and integration points across the enterprise.
• Collaborate with Security Operations, Threat Detection, and Infrastructure teams to improve visibility and response capabilities.
• Troubleshoot SIEM performance issues, ingestion failures, and configuration gaps in a complex environment.
• Support onboarding of new data sources, log types, and enterprise systems into CrowdStrike SIEM.
• Maintain documentation, dashboards, and operational runbooks for SIEM processes and configurations.

Required Skills & Experience

• Strong hands‐on experience with CrowdStrike Falcon platform, especially SIEM/LogScale.
• Proven background administering SIEM tools in large, distributed enterprise environments.
• Expertise in log ingestion, parsing, normalization, and correlation rule development.
• Solid understanding of security operations, detection engineering, and incident response workflows.
• Ability to work effectively as part of a cross‐functional security engineering team.

Certification Requirement

• CrowdStrike certification CCSE is mandatory requirement to be selected for this role.