CrowdStrike Next-Gen SIEM Resident Consultant

Role Description

The Next-Gen SIEM Resident Consultant is an embedded technical advisor who partners closely with strategic customers to maximize the value of their CrowdStrike Next-Gen SIEM investment. This role combines technical expertise with strategic consulting to drive successful Next-Gen SIEM adoption, optimization, and ongoing operational excellence. The resident consultant is responsible for the planning, deployment, implementation, and operational support of the customer’s Next-Gen SIEM environment.

What You’ll Do

• Customer Partnership & Strategy
  • Serve as the primary technical advisor for assigned strategic customer accounts
  • Develop and maintain trusted advisor relationships with customer security teams and leadership
  • Understand customer security operations workflows, use cases, and business objectives
  • Mentor customer teams on SIEM best practices and threat hunting techniques
• Technical Implementation & Optimization
  • Guide customers through Next-Gen SIEM deployment, configuration, and integration
  • Optimize data ingestion strategies and log source configurations
  • Design and implement custom detection rules, correlation searches, and use cases
  • Develop dashboards, reports, and visualizations tailored to customer requirements
  • Assist with migration of detection content from legacy SIEM platforms (Splunk, QRadar, etc.)
  • Perform health checks and platform optimization reviews
  • Troubleshoot complex technical issues and coordinate with engineering teams as needed
  • Track and report on key performance indicators and success metrics
  • Identify opportunities for automation and workflow improvements
  • Contribute to internal knowledge base and best practices documentation

Qualifications

• 5+ years of experience in security operations, SIEM administration, or security engineering
• Familiarity with at least one major SIEM platform (Next-Gen SIEM, LogScale, Splunk, QRadar, Sentinel, Chronicle, etc.)
• Understanding of query languages (SQL, SPL, KQL, CQL, or similar)
• Experience with detection engineering and correlation rule development
• Knowledge of common log sources (Windows, Linux, network devices, cloud platforms)
• Familiarity with scripting/automation (Python, PowerShell, Bash)
• Understanding of cloud security (AWS, Azure, GCP, OCI)
• Familiarity with endpoint detection and response (EDR) concepts
• Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.

Soft Skills

• Exceptional communication skills with ability to explain technical concepts to varied audiences
• Strong presentation and training delivery capabilities
• Self-motivated with excellent time management and prioritization skills
• Customer-focused mindset with commitment to driving customer success
• Ability to work independently in a remote/embedded environment
• Strong problem-solving and analytical thinking abilities

Bonus Points

• Experience with CrowdStrike Falcon platform and Next-Gen SIEM
• CrowdStrike certification (CCFA, CCFH, or similar)
• Previous consulting or customer-facing technical role experience
• Industry certifications (CISSP, GCIA, GCIH, CEH, or similar)
• Experience with SOAR platforms and security automation
• Knowledge of threat intelligence platforms and frameworks

Benefits

• Market leader in compensation and equity awards
• Comprehensive physical and mental wellness programs
• Competitive vacation and holidays for recharge
• Paid parental and adoption leaves
• Professional development opportunities for all employees regardless of level or role
• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
• Vibrant office culture with world class amenities
• Great Place to Work Certified™ across the globe