Sr Security Administrator

Cyber Defense

• 6+ years in security engineering, security administration, or a closely related infrastructure/operations role.
• Hands-on administration experience with CrowdStrike Falcon (or a comparable enterprise EDR/XDR platform) — sensor management, policy configuration, and troubleshooting at scale.
• Working knowledge of SIEM/log management concepts — ingestion, parsing, normalization, and query — ideally with NGSIEM/LogScale or a comparable platform (Splunk, Sentinel, Elastic).
• Practical experience across at least one major cloud (Azure, AWS, GCP, or OCI), including how logging and telemetry are produced and collected.
• Strong troubleshooting instincts and the ability to drive incidents to root cause under pressure.
• Scripting/automation ability (Python, PowerShell, or similar) and comfort working with REST APIs.
• Fluency with AI tools in day-to-day work — using AI assistants for scripting, analysis, and documentation, and a willingness to adopt AI-driven security capabilities as they mature.
• Clear written and verbal communication; able to document processes and work with cross-functional stakeholders.

• Experience with SOAR/orchestration platforms (Fusion SOAR or comparable) and building automation workflows.
• Familiarity with identity protection, cloud security posture (CSPM/CNAPP), or exposure/vulnerability management tooling.
• Multi-cloud breadth (two or more of Azure, AWS, GCP, OCI, VMware).
• Experience onboarding and standing up new security tools from POC to production.
• Exposure to email security tooling (e.g., Proofpoint TAP/TRAP) or other cyber defense platforms.
• Deception technology implementation experience — deploying and administering deception/ITD platforms (e.g., Proofpoint Deception) to detect lateral movement and identity-based attacks.
• Experience applying AI/ML or AI-driven security tooling (e.g., Charlotte AI or comparable) to detection, investigation, or operational automation.
• Relevant certifications — CrowdStrike (CCFA/CCFR/CCFH), cloud (AZ-500, AWS Security, GCP Security), or security fundamentals (Security+, GCIH, GCED).

• The Falcon platform is healthy, current, and well-governed — sensor coverage is high, updates roll out predictably, and configuration drift is under control.
• New tools land cleanly: deployed, integrated, documented, and operational without lingering gaps.
• Ingestion pipelines are reliable and cost-aware, and analysts trust the data.
• Analysts spend their time on investigation and response, not on fighting the tooling — because you removed the friction.

If you want to know the heart of a company, take a look at their values. Ours unite us. They are what drive our success – and the success of our customers. Does your heart beat like ours? Find out here: Core Values

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.