CrowdStrike Service Owner

- We require 8+ years of cybersecurity experience, including at least 5 years of hands-on CrowdStrike Falcon work as an engineer, subject matter expert, or service owner. - We need deep knowledge of the Falcon platform, including Insight (EDR), Prevent (NGAV), Discover, Spotlight, Identity Protection, Cloud Security, LogScale or Next-Gen SIEM, OverWatch, and Falcon Fusion SOAR. - We expect strong detection engineering capability, including custom IOAs, FQL queries, LogScale CQL, Sigma rules, and MITRE ATT&CK mapping. - We require practical incident response leadership using Real Time Response, including custom scripting and large-scale host containment. - We need proficiency with the Falcon API and at least one scripting language, with Python preferred, for automation, integrations, and detection-as-code. - We require experience in a 24x7 service delivery environment such as MSSP, MDR, Falcon Complete, or a large enterprise SOC. - We expect strong client-facing communication skills, including executive-level presentations, QBR leadership, and the ability to translate technical findings into business risk. - We need a solid foundation across Windows, macOS, and Linux endpoints, plus exposure to AWS, Azure, and/or GCP workload protection. - We require at least one current CrowdStrike certification such as CCFA, CCFR, CCFH, or CCFC. - We prefer experience building or scaling a managed CrowdStrike practice within an MSSP or MDR provider. - We value prior exposure to Falcon Complete, OverWatch, or Counter Adversary Operations. - Additional EDR/XDR experience with SentinelOne Singularity, Microsoft Defender for Endpoint, or Palo Alto Cortex XDR is a plus. - Advanced certifications such as CCFC, GCIH, GCFA, GCFE, GNFA, OSCP, CISSP, or CISM are beneficial. - Knowledge of compliance frameworks including NIST CSF, NIST 800-53, ISO 27001, SOC 2, HIPAA, or PCI-DSS is an advantage. - Experience with SOAR platforms beyond Falcon Fusion, such as Tines, Torq, or Splunk SOAR, is desirable. - Kubernetes or container security experience using Falcon Cloud Security is a plus. - ITIL v4 Foundation or an equivalent service management certification is advantageous.