EDR Administration and Monitoring Expert (CrowdStrike)

AND FOR THIS, WE BELIEVE IT WOULD BE IDEAL IF YOU HAD...

Experience

3 years of experience in SIEM technologies.

Experience in the design and maintenance of detection use cases.

Integration and ingestion of security data sources and systems.

Management and operation of SIEM platforms.

Event analysis and security incident investigation.

Definition and tracking of operational KPIs and cybersecurity metrics.

Process automation and report generation.

Technical knowledge

CrowdStrike Next-Gen SIEM / LogScale.

Design and development of use cases and correlation rules.

Integration and ingestion of sources via Syslog, API, agents, and connectors.

Event query and search languages.

MITRE ATT&CK frameworks and threat-based detection.

Preparation of dashboards, KPIs, and cybersecurity reporting.

Knowledge of SOC, Threat Hunting, and Incident Response.

Automation and scripting capabilities (Python, PowerShell, or similar).

Desirable:

Cybersecurity certifications (Security+, CEH, GSEC or equivalents).

CrowdStrike certifications oriented towards SIEM and LogScale:

CrowdStrike Certified Falcon Administrator (CCFA).

CrowdStrike Certified Falcon Responder (CCFR).

CrowdStrike Certified Identity Specialist (CCIS).

Specific CrowdStrike LogScale / Next-Gen SIEM certifications where applicable

Complementary market SIEM certifications.

To perform the role, the skills that would best fit the team and the project would be:

Passionate about security and technology.

Willingness to always do your best, grow, and take on new responsibilities.

Ability to learn and grow in an evolving environment.

Excellent oral and written communication skills.

Ability to work in an environment that requires a high level of detail and confidentiality.

Proactive, self-motivated with the ability to work independently and as a member of a team in a challenging environment.

Able to work both autonomously and collaboratively with colleagues in the same area or others, carrying out teamwork.

Strong focus toward the internal client and results orientation.

Education

Required:

University Degree / Licentiate / Engineering / Computer Science Technical Engineering / Telecommunications or similar.

CrowdStrike Certified Siem Engineer (CCSE)

Intermediate English

• Work-life balance measures and flexible hours.• Ongoing training and certifications.• Hybrid remote work model.• Attractive social benefits package.• Excellent dynamic and multidisciplinary work environment.• Volunteering programs.

In the Telefónica Tech SIEM unit, we work on the design, evolution, and optimization of detection capabilities on SIEM platforms based on CrowdStrike Next-Gen SIEM. Our goal is to maximize visibility of client environments through the integration of data sources, the creation of advanced use cases, and the generation of value metrics that allow for the continuous improvement of the security posture.

WHAT WILL YOUR DAY-TO-DAY BE LIKE?

Your mission will be to manage and evolve detection and monitoring capabilities on the CrowdStrike Next-Gen SIEM platform.

Your day-to-day

Design, development, and documentation of detection use cases.

Integration and ingestion of new data sources into CrowdStrike SIEM.

Proactive evolution and continuous optimization of existing use cases.

Validation and improvement of correlation rules and detection content.

Generation of executive and technical reports on the service.

Extraction, analysis, and tracking of KPIs and service value indicators.

Identification of improvement opportunities in detection and monitoring coverage.

Collaboration with SOC, Threat Hunting, and Incident Response teams to improve detection capabilities.

Automation of processes related to monitoring, reporting, and data analysis.

Participation in platform deployment and evolution projects.