Endpoint Security Operator (CrowdStrike)

Sentar is proud to be an employee-owned company, fostering a culture of empowerment, collaboration, and innovation. Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the team where you can build, innovate, and secure your career.

Sentar is seeking a Endpoint Security Operator (CrowdStrike) in Charleston!

This Integrated Product Team (IPT) is charged with the mission of conducting Defensive Cyberspace Operations to defend subscriber networks. The DHA Cybersecurity Operations Center (CyOC) coordinates and orchestrates cybersecurity activities execution at the DoD Component scale to protect information systems against unauthorized activity, vulnerabilities, or threats.

The Endpoint Security Operator is responsible for the technical administration, operational response, and management of the enterprise's end point security platform and supplemental endpoint security solutions as needed. The role ensures the health of the sensors across all endpoints, manages security policies to meet compliance directives, and serves as a subject matter expert on endpoint threat mitigation. This position performs hands-on triage of security events, validates security configurations for policy compliance, and reports confirmed incidents.

Core Responsibilities:

Platform Administration: Build, maintain, and optimize the CrowdStrike Falcon environment. Manage technical changes, respond to escalated Tier II/III issues, assist with compatibility evaluations, and perform root cause analysis.

Security Operations & Triage: Proactively monitor and evaluate Falcon detections for malicious activity. Perform initial triage, tune prevention policies, develop custom Indicators of Compromise (IOCs), and report confirmed incidents

Compliance & Readiness: Validate and enforce security configurations against STIG and TASKORD directives to ensure policy compliance. Audit and validate the endpoint security posture for CCRI/CORA readiness and report alerting events to Market Place Cyber Support (MPS) and ECMR for compliance monitoring.

Policy & Deployment: Implement the strategy for sensor deployment, security policy tuning, and the rollout of new Falcon capabilities (e.g., Application Control, Device Control) across the enterprise.

• A minimum of three years of experience administering an enterprise endpoint security platform within a DoD context
• Citizenship: Must be a US Citizen.

• Core Skills:
  • Excellent problem-solving, analytical, and communication abilities.
  • Ability to collaborate effectively with multiple teams in a fast-paced environment.
  • Strong understanding of common enterprise technologies and cybersecurity principles.

Highly Desired Technical Skills

• CrowdStrike Expertise: Deep knowledge of the CrowdStrike Falcon platform, including Prevent/Insight (NGAV/EDR), Discover (Asset Inventory), Device Control (DLP), and Falcon Control (Application Control).
• Systems Administration: Strong background in both Windows and Linux OS administration in a large enterprise (2,000+ servers).
• SIEM Integration: Experience developing security-focused content and dashboards in Splunk using endpoint security data.

Our culture is one of inclusivity and support. Sentar is proudly an Equal Opportunity and VEVRAA Federal Contractor Employer M/F/Vets/Persons with Disabilities. Follow these links to learn more about your rights: EEO Is the Law Poster; EEO Is Law Supplement; and Pay Transparency.

We want you to build your career at Sentar, so if you are an individual with a disability and require a reasonable workplace accommodation applying for a job or at any point in the employment process, contact the Recruiting Manager at recruiting@sentar.com. Please indicate the specifics of the assistance needed. Thank you for considering Sentar in your employment search.