Role Overview

We are looking for an experienced CrowdStrike Next-Gen SIEM Administrator with strong hands-on expertise in managing, configuring, and supporting CrowdStrike Falcon Next-Gen SIEM environments. The role will focus on SIEM administration, log onboarding, integrations, detection configuration, troubleshooting, and supporting Security Operations teams.

CrowdStrike’s current platform supports custom parsers, third-party log ingestion, correlation/custom detections, and Fusion SOAR workflow automation. [developer....strike.com]

Key Responsibilities

- Administer and manage CrowdStrike Falcon Next-Gen SIEM / LogScale .
- Configure and onboard security log sources, connectors, and telemetry.
- Develop and maintain parsers, queries, dashboards, alerts, and detection rules.
- Troubleshoot log ingestion, parsing, normalization, connectivity, and data-quality issues.
- Build and tune detection rules and security use cases to improve alert quality.
- Integrate endpoint, network, identity, cloud, and security-tool logs into the SIEM.
- Support CrowdStrike Falcon telemetry integration and security monitoring.
- Manage user access, roles, permissions, and platform configurations.
- Work with SOC,



Incident Response, Threat Hunting, Cloud, and Security Engineering teams.
- Support automation and integration with SOAR and other security platforms.
- Maintain technical documentation, operational procedures, and SIEM configurations.

Required Skills

- Strong hands-on experience with CrowdStrike Falcon Next-Gen SIEM / LogScale.
- Positive knowledge of SIEM administration, architecture, and log management.
- Experience with log onboarding, parsing, normalization, data connectors, and troubleshooting.
- Hands-on experience developing queries, dashboards, alerts, correlation rules, and detections.
- Understanding of Windows, Linux, network, cloud, identity, endpoint, and security logs.
- Good understanding of SOC operations, Detection Engineering, Incident Response, and Threat Hunting.
- Knowledge of MITRE ATT&CK; and attacker TTPs.
- Experience with APIs, JSON, Regex, and scripting such as Python, PowerShell, or Bash.
- Exposure to other SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or Elastic will be an advantage.

📌 Cyber Security Analyst (Maharashtra)
🏢 Etenico Technologies
📍 Maharashtra