Resident Service Principal Consultant, NG SIEM

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We’re also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role:
CrowdStrike has taken Falcon LogScale to the next level and has released Next Generation SIEM (NGSIEM) powered by Falcon LogScale and we are looking for individuals across the industry to add their passion and experience in helping customers realize better security outcomes with log management and advanced data analytics.

As a Principal Resident Engineering Consultant focusing on the LogScale NGSIEM Resident Services team, you’ll spearhead key efforts and become a trusted advisor to customers by answering technical questions, demonstrating Falcon LogScale and its NGSIEM capabilities, and laying out a technical vision of Falcon LogScale and/or NGSIEM roadmap for customers to follow. Working alongside Falcon NGSIEM and LogScale engineers and other cross functional teams, you’ll be a critical part of operationalizing LogScale NGSIEM within customer environments. You’ll work with the customer as they discover what Falcon NGSIEM and LogScale can do for them, help expand their use cases, and provide feedback timely to the Falcon NGSIEM and LogScale Product Management teams. Simultaneously you’ll develop internal relationships to partner with key stakeholders to influence product enhancements that will meet customer needs.

The position is remote-friendly within the United States with the opportunity for limited travel onsite with customers.

What You'll Do:

• Serve as the highest-level technical escalation resource for complex SIEM implementations and customer challenges

• Lead architectural design and implementation strategies for enterprise-scale Falcon LogScale deployments

• Mentor and provide technical guidance to resident engineers and customers

• Drive best practices and standard methodologies across the resident engineering team

• Collaborate with Product Management to influence roadmap based on customer feedback

• Develop and maintain technical documentation and implementation frameworks

• Work independently providing best-in-class delivery and integration services to a wide range of organizations and verticals

• Act a trusted advisor to help lead customers to mature outcomes using next generation SIEM, log management, XDR and SOAR features and functionality

• Provide knowledge transfer of Falcon LogScale NGSIEM to our customers

What You'll Need:

We’re looking for a colleague with a great compassion for taking care of customers and their challenges combined with well-rounded technical, analytical, and customer service skills. We want someone who appreciates the importance of teamwork but will also benefit from your proactive approach to solving challenges and helping external and internal parties.

• 10+ years of experience working with log management/SIEM solutions (e..g, Falcon LogScale, Splunk, Trellix, Chronicle, Exabeam, Sumo Logic, etc) and SOAR (e.g., CrowdStrike Fusion, Palo Alto XSOAR, Splunk Demisto, etc.) in a professional services consulting role or similar capacity

• Strong understanding of enterprise security architectures and logging frameworks

• Experience working with pre-sales teams on technical scoping and requirements gathering, and with post-sales handoffs

• Expert knowledge of SIEM skills and best practices related to log analysis, data onboarding, parsers, search queries, dashboards, and alerts

• In-depth knowledge of common Cloud providers such as AWS, GCP, and Azure, and traditional IT services, such as active directory services, authentication, networking, data storage

• Experience creating configuration, automation and integration scripts with languages, tools and standards such as Python, Powershell, Javascript, YAML, REST API, GO, Cribl, Postman, etc.

• Experience developing documentation and transferring knowledge of deployments to customers and internal stakeholders

• Experience translating your knowledge of customer requirements and experiences into feedback for internal product and engineering teams

• Occasional travel may be required (<25%)

• Strong problem-solving, written and oral communication skills in English

Bonus Points:

• Recent (last 3 years) industry certifications with SANS, ISC2, Amazon, Microsoft, Google and other organizations within the Information Security domain

• Long term (6 months min) recent experience within a SOC performing analysis and triage of security incidents using a SIEM, Log Management and/or SOAR platform

• Applied knowledge and integration experience with a generative AI platform