Skill - Identity Threat Protection Engineer (CrowdStrike Identity Protection / Agentic identity discovery)

Role Summary

Detect, prevent, and respond to identity-based attacks across Active Directory and Microsoft Entra ID using CrowdStrike Falcon Identity Protection. Transition from alert handling to automated, policy-driven prevention that lowers both risk and operational load.

Key Responsibilities

- Deploy, configure, and fine tune CrowdStrike Falcon Identity Protection across AD and Entra ID.
- Identify and drive remediation of identity exposures, including stale and privileged accounts, weak or compromised passwords, risky delegations, and attack paths.
- Implement identity-based policies, such as MFA challenge or block on risky authentication, to stop attacks in real time.
- Investigate identity threats such as credential theft, lateral movement, and privilege escalation.
- Automate response playbooks (e.g. using Falcon Fusion SOAR or other) to reduce manual triage.




- Run POCs on new identity threat detection and response capabilities to ensure compatibility with existing Microsoft controls to avoid duplication.
- Collaborate with SOC and the Entra resource to correlate identity signals and agree on response ownership.
- Provide backup cover for service account and non-human identity protection, especially in Active Directory.

Required Skills >> CrowdStrike Identity Protection / Agentic identity discovery

- 7 10 years of hands on experience in identity security, Active Directory security, SOC, or security engineering.
- Hands-on experience with CrowdStrike Falcon, preferably Identity Protection.
- Solid knowledge of Active Directory, Kerberos, NTLM, LDAP, and common AD attack techniques.
- Familiarity with Microsoft Entra ID and hybrid authentication.
- Experience in incident investigation, threat hunting, and response automation.

Preferred Skills

- Knowledge of MITRE ATTACK techniques for credential access and lateral movement.
- SIEM/SOAR integration experience.
- Awareness of AIDR, CrowdStrike Falcon Guardian

📌 Identity Threat Protection Engineer (Bengaluru)
🏢 Cyberidentitysolutions
📍 Bengaluru