CrowdStrike Engineer

CrowdStrike EngineerHybrid - Skokie Arlington Heights or Warrenville IL (Partial Remote) Job Summary: As the Security Engineer II CrowdStrike Subject Matter Expert you will be the lead engineer and in-house expert for the organizations CrowdStrike platform. You will own the configuration protection policies and ongoing improvement of CrowdStrike across the enterprise. This is a hands-on engineering role not an incident response role. The ideal candidate has configured policies led rollouts moved environments to stricter policies and set up the platforms various components. They have not only used CrowdStrike to resolve alerts.A key focus of this role is leading the rollout of CrowdStrike Guardian CrowdStrikes new AI detection and response tool for data loss prevention (DLP) and AI protection. Guardian will replace the current DLP agent. The rollout has already started with a pilot alongside the End-User Computing team. You will also work closely with the organizations managed security services provider (MSSP) which co-manages the environment and you will support the enterprise email security program on Microsoft addition you will help improve the organizations cybersecurity posture and keep watch over its data systems and resources. You will help carry out the enterprise security strategy create security policies and standards review systems for compliance and support risk management governance and incident response. Responsibilities include maintaining alignment with HIPAA PCI and other applicable laws regulations and standards. What you will do: Serve as the lead engineer and subject matter expert for the CrowdStrike platform owning all protection policies platform configuration and component the rollout of CrowdStrike Guardian for data loss prevention and AI protections including pilot activities with End-User Computing and the transition off the current DLP configure tune and move CrowdStrike policies to more stringent security standards over time balancing protection with business and clinical and carry out CrowdStrike deployments rollouts and configuration changes across the with the organizations MSSP which co-manages the environment. Direct configuration changes and review alerts escalated by the enterprise email security using Microsoft E5 including making sure email authentication standards such as SPF DKIM and DMARC are properly configured and threats and vulnerabilities. Conduct complex security incident reviews and investigationsand support incident response and recovery design and implement security technologies and processes as directed by leadership in collaboration with departmental colleagues and business and application administer monitor and support 23 security applications with CrowdStrike as the primary platform. Troubleshoot and resolve problems with cybersecurity technologies and automate operational use of these tools to reduce -train team members on CrowdStrike operational and report on enterprise security capabilities using automated and manual and maintain security policies standards and standard operating procedures. Share security strategies standards and procedures with IT and business in reviews of new or existing systems to confirm they meet security requirements including risk and impact assessments before and after to and assist with audits assessments and compliance requests including HIPAA Security and Privacy rules and Payment Card Industry (PCI) in an on-call rotation with peers to address incidents as they are assigned including reporting on site during a crisis or major incident when all other duties as assigned. What you will need: Education: Bachelors degree or equivalent in a technical discipline or a similar educational background with professional-level security certifications relevant to the : One advanced professional or expert-level security certification : Minimum three (3) years of mid-level cybersecurity experience at an analyst or engineer -level hands-on engineering experience with CrowdStrike including policy configuration platform deployments and rollouts and component configuration. Experience that is only in incident response or alert handling is not experience leading supporting managing and administering at least one security experience leading security projects and experience that aligns with Endeavor Healths enterprise security stack. Unique or Preferred Skills: Experience with CrowdStrike Guardian or other data loss prevention (DLP) and AI protection tools. Guardian is a new tool so hands-on experience is not understanding of email security and email authentication protocols including SPF DKIM and with Microsoft E5 security capabilities particularly email security. Exposure to Proofpoint is a to work independently with minimal oversight on a broad range of security projects and in-depth knowledge of information security principles practices solutions and understanding of advanced security incident investigation understanding of threats and -level knowledge of network application and systems security and project management communication customer service and organization experience with HIPAA NIST and project me at &