Position - CrowdStrike NG-SIEM Implementation Engineer

Experience Required - 3 - 5 years

Location - Mumbai

Employment Type - Full-Time About the Role We are looking for a CrowdStrike NG-SIEM Implementation Engineer to design, deploy, and fine-tune CrowdStrike's Next-Gen SIEM for enterprise and BFSI clients. The role involves end-to-end implementation - from log source onboarding and data pipeline configuration to detection engineering, dashboarding, and handover to the client's SOC/security team. This is a client-facing, hands-on engineering role suited to someone who enjoys working directly with security telemetry and helping customers get real value from their SIEM investment.

Key Responsibilities Plan and execute end-to-end implementation of CrowdStrike NG-SIEM across customer environments, including architecture design and sizing.

Onboard and configure log sources - endpoints, firewalls, servers, cloud workloads, identity systems, and third-party security tools - via connectors, syslog, and API-based ingestion.

Build and tune parsers, data pipelines, and normalization rules to ensure clean, structured log ingestion.

Develop and customize correlation rules, detections, alerts, dashboards, and saved searches aligned to client use cases and compliance requirements.

Integrate NG-SIEM with CrowdStrike Falcon platform modules (EDR, Identity Protection, etc.) and third-party tools for unified visibility.

Support use-case development mapped to MITRE ATT&CK; for threat detection and monitoring.

Conduct health checks, performance tuning, and troubleshoot data ingestion or query performance issues.

Prepare implementation documentation - low-level design (LLD), configuration guides, runbooks,



and knowledge transfer material for client SOC teams.

Coordinate with CrowdStrike TAM/support, internal pre-sales, and project management teams to ensure on-time, on-scope delivery.

Required Skills & Experience 3-5 years of hands-on experience in SIEM implementation/administration (CrowdStrike NG-SIEM/LogScale, Humio, Splunk, QRadar, Sentinel, or similar - CrowdStrike NG-SIEM experience strongly preferred).

Working knowledge of log management concepts: parsing, normalization, data pipelines, indexing, and retention policies.

Experience writing search queries, correlation rules, and dashboards (CQL/LogScale query language, SPL, KQL, or AQL exposure is a plus).

Understanding of common log sources - Windows/Linux logs, firewalls, proxies, cloud (AWS/Azure/GCP), Active Directory, and network devices.

Familiarity with the CrowdStrike Falcon platform (EDR/XDR) is a strong advantage.

Basic understanding of security concepts - threat detection, incident response workflows, and MITRE ATT&CK; framework.

Scripting/automation exposure (Python, PowerShell, or Bash) for parser or integration customization is a plus.

Solid troubleshooting skills and comfort working directly with enterprise/BFSI customers.

Good communication skills for client-facing documentation, calls, and knowledge transfer sessions. Good to Have CrowdStrike certification(s) - e.g., CCFA, CCFH, or NG-SIEM specific certification.

Prior experience with other Softcell-supported security tools (Forcepoint DLP, CyberArk, Cloudflare) is an added advantage.

Exposure to compliance frameworks relevant to BFSI (RBI guidelines, ISO 27001, PCI-DSS). Qualification

Bachelor's degree in computer science, IT, or a related field (B.E./B.Tech/BCA or equivalent).

📌 NG-SIEM Crowdstrike Implementation Engineer (Mumbai)
🏢 Softcell Technologies Global
📍 Mumbai