Position - CrowdStrike NG-SIEM Implementation Engineer

Experience Required - 3 - 5 years

Location - Mumbai

Employment Type - Full time

About the Role

We are looking for a CrowdStrike NG-SIEM Implementation Engineer to design, deploy, and fine-tune CrowdStrike's Next-Gen SIEM for enterprise and BFSI clients. The role involves end-to-end implementation - from log source onboarding and data pipeline configuration to detection engineering, dashboarding, and handover to the client's SOC/security team. This is a client-facing, hands-on engineering role suited to someone who enjoys working directly with security telemetry and helping customers get real value from their SIEM investment.

Key Responsibilities

- Plan and execute end-to-end implementation of CrowdStrike NG-SIEM across customer environments, including architecture design and sizing.
- Onboard and configure log sources - endpoints, firewalls, servers, cloud workloads, identity systems, and third-party security tools - via connectors, syslog, and API-based ingestion.
- Build and tune parsers, data pipelines, and normalization rules to ensure clean, structured log ingestion.
- Develop and customize correlation rules, detections, alerts, dashboards, and saved searches aligned to client use cases and compliance requirements.
- Integrate NG-SIEM with CrowdStrike Falcon platform modules (EDR, Identity Protection, etc.) and third-party tools for unified visibility.
- Support use-case development mapped to MITRE ATT&CK; for threat detection and monitoring.
- Conduct health checks, performance tuning, and troubleshoot data ingestion or query performance issues.
- Prepare implementation documentation - low-level design (LLD), configuration guides, runbooks,



and knowledge transfer material for client SOC teams.
- Coordinate with CrowdStrike TAM/support, internal pre-sales, and project management teams to ensure on-time, on-scope delivery.

Required Skills & Experience

- 3-5 years of hands-on experience in SIEM implementation/administration (CrowdStrike NG-SIEM/LogScale, Humio, Splunk, QRadar, Sentinel, or similar - CrowdStrike NG-SIEM experience strongly preferred).
- Working knowledge of log management concepts: parsing, normalization, data pipelines, indexing, and retention policies.
- Experience writing search queries, correlation rules, and dashboards (CQL/LogScale query language, SPL, KQL, or AQL exposure is a plus).
- Understanding of common log sources - Windows/Linux logs, firewalls, proxies, cloud (AWS/Azure/GCP), Active Directory, and network devices.
- Familiarity with the CrowdStrike Falcon platform (EDR/XDR) is a strong advantage.
- Basic understanding of security concepts - threat detection, incident response workflows, and MITRE ATT&CK; framework.
- Scripting/automation exposure (Python, PowerShell, or Bash) for parser or integration customization is a plus.
- Strong troubleshooting skills and comfort working directly with enterprise/BFSI customers.
- Good communication skills for client-facing documentation, calls, and knowledge transfer sessions.

Good to Have

- CrowdStrike certification(s) - e.g., CCFA, CCFH, or NG-SIEM specific certification.
- Prior experience with other Softcell-supported security tools (Forcepoint DLP, CyberArk, Cloudflare) is an added advantage.
- Exposure to compliance frameworks relevant to BFSI (RBI guidelines, ISO 27001, PCI-DSS).

Qualification

- Bachelor's degree in computer science, IT, or a related field (B.E./B.Tech/BCA or equivalent).

📌 NG-SIEM Crowdstrike Implementation Engineer (Mumbai)
🏢 Softcell Technologies Global
📍 Mumbai