CrowdStrike Engineer

1. Have you configured CrowdStrike protection policies yourself? Please describe the policies you built or managed.
2. Have you led or taken part in a CrowdStrike rollout or deployment? What was your role, and how large was the environment?
3. Have you moved an environment from existing CrowdStrike policies to more stringent ones? How did you plan and manage that change?
4. Which CrowdStrike components or modules have you configured, beyond using the console to respond to incidents?
5. Explain how SPF, DKIM and DMARC work together to protect an organization's email. What role does each one play?

• Serve as the lead engineer and subject matter expert for the CrowdStrike platform, owning all protection policies, platform configuration and component setup.
• Lead the rollout of CrowdStrike Client for data loss prevention and AI protections, including pilot activities with End-User Computing and the transition off the current DLP agent.
• Design, configure, tune and move CrowdStrike policies to more stringent security standards over time, balancing protection with business and clinical operations.
• Plan and carry out CrowdStrike deployments, rollouts and configuration changes across the enterprise.
• Partner with the organization's MSSP, which co-manages the environment. Direct configuration changes and review alerts escalated by the MSSP.
• Support enterprise email security using Microsoft E5, including making sure email authentication standards such as SPF, DKIM and DMARC are properly configured and maintained.
• Identify threats and vulnerabilities. Conduct complex security incident reviews and investigations, and support incident response and recovery activities.
• Architect, design and implement security technologies and processes as directed by leadership, in collaboration with departmental colleagues and business and application owners.
• Manage, administer, monitor and support 2 3 security applications, with CrowdStrike as the primary platform. Troubleshoot and resolve problems with cybersecurity technologies, and automate operational use of these tools to reduce risk.
• Cross-train team members on CrowdStrike operational processes.
• Measure and report on enterprise security capabilities using automated and manual tools.
• Develop and maintain security policies, standards and standard operating procedures. Share security strategies, standards and procedures with IT and business partners.
• Participate in reviews of new or existing systems to confirm they meet security requirements, including risk and impact assessments before and after implementation.
• Respond to and assist with audits, assessments and compliance requests, including HIPAA Security and Privacy rules and Payment Card Industry (PCI) standards.
• Participate in an on-call rotation with peers to address incidents as they are assigned, including reporting on site during a crisis or major incident when needed.
• Execute all other duties as assigned.

• Education: Bachelor's degree, or equivalent, in a technical discipline, or a similar educational background with professional-level security certifications relevant to the role.
• Certification: One advanced, professional or expert-level security certification preferred.
• Experience: Minimum three (3) years of mid-level cybersecurity experience at an analyst or engineer level.
• Expert-level, hands-on engineering experience with CrowdStrike, including policy configuration, platform deployments and rollouts, and component configuration. Experience that is only in incident response or alert handling is not sufficient.
• Previous experience leading, supporting, managing and administering at least one security application.
• Previous experience leading security projects and initiatives.
• IT experience that aligns with Endeavor Health's enterprise security stack.

• Experience with CrowdStrike Client or other data loss prevention (DLP) and AI protection tools. Client is a new tool, so hands-on experience is not expected.
• Strong understanding of email security and email authentication protocols, including SPF, DKIM and DMARC.
• Experience with Microsoft E5 security capabilities, particularly email security. Exposure to Proofpoint is a plus.
• Ability to work independently with minimal oversight on a broad range of security projects and initiatives.
• Demonstrated in-depth knowledge of information security principles, practices, solutions and capabilities.
• Demonstrated understanding of advanced security incident investigation techniques.
• Intermediate understanding of threats and risks.
• Intermediate-level knowledge of network, application and systems security architecture.
• Leadership and project management skills.
• Proven communication, customer service and organization skills.
• Previous experience with HIPAA, NIST and project management.

careers@tekfortune.com