Skill - Identity Threat Protection Engineer (CrowdStrike Identity Protection / Agentic identity discovery)

Role Summary

Detect, prevent, and respond to identity-based attacks across Active Directory and Microsoft Entra ID using CrowdStrike Falcon Identity Protection. Transition from alert handling to automated, policy-driven prevention that lowers both risk and operational load.

Key Responsibilities
Deploy, configure, and fine tune CrowdStrike Falcon Identity Protection across AD and Entra ID.
Identify and drive remediation of identity exposures, including stale and privileged accounts, weak or compromised passwords, risky delegations, and attack paths.
Implement identity-based policies, such as MFA challenge or block on risky authentication, to stop attacks in real time.
Investigate identity threats such as credential theft, lateral movement, and privilege escalation.
Automate response playbooks (e.g. using Falcon Fusion SOAR or other) to reduce manual triage.




Run POCs on current identity threat detection and response capabilities to ensure compatibility with existing Microsoft controls to avoid duplication.
Collaborate with SOC and the Entra resource to correlate identity signals and agree on response ownership.
Provide backup cover for service account and non-human identity protection, especially in Active Directory.

Required Skills >> CrowdStrike Identity Protection / Agentic identity discovery
7 10 years of hands on experience in identity security, Active Directory security, SOC, or security engineering.
Hands-on experience with CrowdStrike Falcon, preferably Identity Protection.
Solid knowledge of Active Directory, Kerberos, NTLM, LDAP, and common AD attack techniques.
Familiarity with Microsoft Entra ID and hybrid authentication.
Experience in incident investigation, threat hunting, and response automation.

Preferred Skills
Knowledge of MITRE ATTACK techniques for credential access and lateral movement.
SIEM/SOAR integration experience.
Awareness of AIDR, CrowdStrike Falcon Guardian

📌 Identity Threat Protection Engineer Bengaluru (India)
🏢 Cyberidentitysolutions
📍 India