02 Nov
|
Cyberidentitysolutions
|
India
02 Nov
Cyberidentitysolutions
India
Skill - Identity Threat Protection Engineer (Crowd Strike Identity Protection / Agentic identity discovery)
Role Summary
Detect, prevent, and respond to identity-based attacks across Active Directory and Microsoft Entra ID using Crowd Strike Falcon Identity Protection. Transition from alert handling to automated, policy-driven prevention that lowers both risk and operational load.
Key Responsibilities
- Deploy, configure, and fine tune Crowd Strike Falcon Identity Protection across AD and Entra ID.
- Identify and drive remediation of identity exposures, including stale and privileged accounts, weak or compromised passwords, risky delegations, and attack paths.
- Implement identity-based policies, such as MFA challenge or block on risky authentication, to stop attacks in real time.
- Investigate identity threats such as credential theft, lateral movement, and privilege escalation.
- Automate response playbooks (e.g. using Falcon Fusion SOAR or other) to reduce manual triage.
- Run POCs on new identity threat detection and response capabilities to ensure compatibility with existing Microsoft controls to avoid duplication.
- Collaborate with SOC and the Entra resource to correlate identity signals and agree on response ownership.
- Provide backup cover for service account and non-human identity protection, especially in Active Directory.
Required Skills >> Crowd Strike Identity Protection / Agentic identity discovery
- 7 10 years of hands on experience in identity security, Active Directory security, SOC, or security engineering.
- Hands-on experience with Crowd Strike Falcon, preferably Identity Protection.
- Solid knowledge of Active Directory, Kerberos, NTLM, LDAP, and common AD attack techniques.
- Familiarity with Microsoft Entra ID and hybrid authentication.
- Experience in incident investigation, threat hunting, and response automation.
Preferred Skills
- Knowledge of MITRE ATTACK techniques for credential access and lateral movement.
- SIEM/SOAR integration experience.
- Awareness of AIDR, Crowd Strike Falcon Guardian
📌 Identity Threat Protection Engineer (India)
🏢 Cyberidentitysolutions
📍 India