CrowdStrike Next-Gen SIEM Resident Consultant

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn't changed --- we're here to stop breaches, and we've redefined modern security with the world's most advanced AI-native platform.

About the Role

The Next-Gen SIEM Resident Consultant is an embedded technical advisor who partners closely with strategic customers to maximize the value of their CrowdStrike Next-Gen SIEM investment. This role combines technical expertise with strategic consulting to drive successful Next-Gen SIEM adoption, optimization, and ongoing operational excellence.

What You'll Do

Customer Partnership & Strategy

• Serve as the primary technical advisor for assigned strategic customer accounts.
• Develop and maintain trusted advisor relationships with customer security teams and leadership.
• Understand customer security operations workflows, use cases, and business objectives.
• Mentor customer teams on SIEM best practices and threat hunting techniques.

Technical Implementation & Optimization

• Guide customers through Next-Gen SIEM deployment, configuration, and integration.
• Optimize data ingestion strategies and log source configurations.
• Design and implement custom detection rules, correlation searches, and use cases.
• Develop dashboards, reports, and visualizations tailored to customer requirements.
• Assist with migration of detection content from legacy SIEM platforms (Splunk, QRadar, etc.).
• Perform health checks and platform optimization reviews.
• Troubleshoot complex technical issues and coordinate with engineering teams as needed.
• Track and report on key performance indicators and success metrics.
• Identify opportunities for automation and workflow improvements.
• Contribute to internal knowledge base and best practices documentation.

What You'll Need

Technical Skills

• 5 years of experience in security operations, SIEM administration, or security engineering.
• Familiarity with at least one major SIEM platform (Next-Gen SIEM, LogScale, Splunk, QRadar, Sentinel, Chronicle, etc.).
• Understanding of query languages (SQL, SPL, KQL, CQL, or similar).
• Experience with detection engineering and correlation rule development.
• Knowledge of common log sources (Windows, Linux, network devices, cloud platforms).
• Familiarity with scripting/automation (Python, PowerShell, Bash).
• Understanding of cloud security (AWS, Azure, GCP, OCI).
• Familiarity with endpoint detection and response (EDR) concepts.
• Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.

Soft Skills

• Exceptional communication skills with ability to explain technical concepts to varied audiences.
• Strong presentation and training delivery capabilities.
• Self-motivated with excellent time management and prioritization skills.
• Customer-focused mindset with commitment to driving customer success.
• Ability to work independently in a remote/embedded environment.
• Strong problem-solving and analytical thinking abilities.

Bonus Points

• Experience with CrowdStrike Falcon platform and Next-Gen SIEM.
• CrowdStrike certification (CCFA, CCFH, or similar).
• Previous consulting or customer-facing technical role experience.
• Industry certifications (CISSP, GCIA, GCIH, CEH, or similar).
• Experience with SOAR platforms and security automation.
• Knowledge of threat intelligence platforms and frameworks.

Benefits of Working at CrowdStrike

• Market leader in compensation and equity awards.
• Comprehensive physical and mental wellness programs.
• Competitive vacation and holidays for recharge.
• Paid parental and adoption leaves.
• Professional development opportunities for all employees regardless of level or role.
• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections.
• Vibrant office culture with world class amenities.
• Great Place to Work Certified™ across the globe.

#LI-DL1 #LI-Remote

This role may require the candidate to periodically undergo and pass alcohol and/or drug test(s) during the course of employment.

CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed.

Expected Close Date of Job Posting is: 09-06-2026