Endpoint Security Operator (CrowdStrike)

Role Description

This Integrated Product Team (IPT) is charged with the mission of conducting Defensive Cyberspace Operations to defend subscriber networks. The DHA Cybersecurity Operations Center (CyOC) coordinates and orchestrates cybersecurity activities execution at the DoD Component scale to protect information systems against unauthorized activity, vulnerabilities, or threats.

Core Responsibilities

• Platform Administration: Build, maintain, and optimize the CrowdStrike Falcon environment. Manage technical changes, respond to escalated Tier II/III issues, assist with compatibility evaluations, and perform root cause analysis.
• Security Operations & Triage: Proactively monitor and evaluate Falcon detections for malicious activity. Perform initial triage, tune prevention policies, develop custom Indicators of Compromise (IOCs), and report confirmed incidents.
• Compliance & Readiness: Validate and enforce security configurations against STIG and TASKORD directives to ensure policy compliance. Audit and validate the endpoint security posture for CCRI/CORA readiness and report alerting events to Market Place Cyber Support (MPS) and ECMR for compliance monitoring.
• Policy & Deployment: Implement the strategy for sensor deployment, security policy tuning, and the rollout of new Falcon capabilities (e.g., Application Control, Device Control) across the enterprise.

Qualifications

• Clearance Level: Top Secret
• Certifications: IAT Level II required, IAT III preferred
• Education: Bachelor's degree in a related field or five years of equivalent professional experience.
• Experience: A minimum of three years of experience administering an enterprise endpoint security platform within a DoD context

Core Skills

• Excellent problem-solving, analytical, and communication abilities.
• Ability to collaborate effectively with multiple teams in a fast-paced environment.
• Strong understanding of common enterprise technologies and cybersecurity principles.

Desired Technical Skills

• CrowdStrike Expertise: Deep knowledge of the CrowdStrike Falcon platform, including Prevent/Insight (NGAV/EDR), Discover (Asset Inventory), Device Control (DLP), and Falcon Control (Application Control).
• Systems Administration: Strong background in both Windows and Linux OS administration in a large enterprise (2,000+ servers).
• Siem Integration: Experience developing security-focused content and dashboards in Splunk using endpoint security data.

Benefits

• Voluntary Medical, Dental, Vision, with Health Savings or Flexible Spending Plan options
• Voluntary Life, Critical Illness, Accident, and Long Term Care insurance options
• Group Term Life, Short-Term and Long-Term Disability is provided by Sentar to all qualifying employees
• Generous 401(k) match
• Competitive PTO plan that graduates quickly with years of service
• Other leave programs; holiday schedule along with bereavement, maternity, jury and military duty
• Mental health awareness programs
• Tuition reimbursement
• Professional development reimbursement
• Recognition and Awards programs