Search

Cybersecurity Operations Manager/ TAM - CrowdStrike Certified - Face to Face Interview

PublishedPublished: 6/14/2022
Technology

Job Description

Cybersecurity Operations Manager/ TAM – CrowdStrike Certified

\n

San Diego, CA - (Onsite)

\n

12+ Months Contract

\n


\n

Job Description:

\n


\n

We are seeking an experienced Cybersecurity Operations Manager / Technical Account Manager (TAM) to serve as the onsite liaison among clients. This 12-month role will lead operational oversight of CrowdStrike services, including implementation, adoption, governance, and daily coordination.

\n


\n

Experience:

\n

    \n
  • 10+ years of cybersecurity experience spanning security operations, incident response, threat detection, exposure management, or managed security services
  • \n

  • 5+ years of experience
  • \n

  • 3+ years of operational experience with CrowdStrike Falcon technologies, preferably Falcon Complete, Insight, Identity Protection, Exposure Management, Next-Gen SIEM, or Guardian / AIDR
  • \n

\n


\n

Cybersecurity and Leadership

\n

    \n
  • CISSP - Certified Information Systems Security Professional.
  • \n

  • CISM - Certified Information Security Manager.
  • \n

  • CCSP - Certified Cloud Security Professional.
  • \n

  • GIAC Certified Incident Handler (GCIH), GIAC Certified Enterprise Defender (GCED), or comparable GIAC certification.
  • \n

  • CompTIA Security+ for candidates whose broader experience demonstrates senior-level capability.
  • \n

\n


\n

CrowdStrike:

\n

    \n
  • CrowdStrike Certified Falcon Administrator (CCFA).
  • \n

  • CrowdStrike Certified Falcon Responder (CCFR).
  • \n

  • CrowdStrike Certified Falcon Hunter (CCFH).
  • \n

  • Other current CrowdStrike credentials relevant to Falcon Complete, identity, exposure management, or Next-Gen SIEM.
  • \n

\n

\n

Program and Service Management

\n

    \n
  • PMP - Project Management Professional.
  • \n

  • ITIL 4 Foundation or advanced ITIL certification.
  • \n

  • Microsoft Certified: Security Operations Analyst Associate or Cybersecurity Architect Expert.
  • \n

\n


\n

Core Skills:

\n

    \n
  • Platforms & Products: CrowdStrike Falcon Complete, Falcon Insight EDR, Falcon Identity Protection, Falcon Exposure Management, Falcon Guardian / AIDR, Falcon Next-Gen SIEM, Falcon OverWatch, ServiceNow, Microsoft Intune, SCCM, BigFix, TAM, ICW, RACI, SOC
  • \n

  • Methodologies & Delivery: Jira, ITIL
  • \n

  • Industry & Domain Knowledge: Active Directory, CIS Controls, ISO/IEC 27001
  • \n

  • Cloud Platforms & Services: AWS, Azure, Google Cloud
  • \n

  • Security & Compliance: MITRE ATT&CK
  • \n

\n


\n

Key Responsibilities:

\n

    \n
  • Lead operational oversight of CrowdStrike services.
  • \n

  • Lead the successful implementation and onboarding of CrowdStrike services.
  • \n

  • Establish governance, operational reviews, escalation paths, and service-management processes.
  • \n

  • Manage CTEM operations and remediation coordination.
  • \n

  • Manage Falcon Guardian / AIDR administration and operating processes.
  • \n

  • Assist ICW in maturing security operations and incident-response processes.
  • \n

  • Act as the primary operational liaison for Falcon Complete service matters.
  • \n

  • Coordinate critical-incident communications, follow-up actions, and closure.
  • \n

  • Ensure recommendations are assigned, tracked, and resolved by the appropriate ICW or the client team.
  • \n

  • Coordinate implementation workstreams, dependencies, risks, and delivery with the client as the GSI.
  • \n

  • Maintain accountability through documented owners, due dates, actions, and escalations.
  • \n

  • Coordinate response and remediation across infrastructure, endpoint, identity, cloud, and application teams.
  • \n

  • Lead day-to-day administration and operating processes for CTEM and Falcon Guardian / AIDR.
  • \n

  • Coordinate exposure prioritization, remediation, tuning, reporting, and continuous improvement.
  • \n

  • Integrate findings into ICW workflows and partner with asset owners to reduce risk.
  • \n

  • Lead weekly operational and monthly service reviews.
  • \n

  • Maintain a RAID log covering risks, assumptions, issues, and dependencies.
  • \n

  • Create executive dashboards and concise status reporting.
  • \n

  • Maintain the roadmap, RACI, escalation model, and transition plan.
  • \n

  • Implement oversight, deployment coordination, and operational transition plan.
  • \n

\n


\n

Preferred Qualification:

\n

    \n
  • Okta
  • \n

  • Security+
  • \n

Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...