Cyber Security Engineer - CrowdStrike Falcon Specialist

Contract | £425 per day Outside IR35 | Remote UK

We are supporting a major enterprise organisation with the rollout and optimisation of CrowdStrike Falcon across a complex technology estate and are looking for an experienced Cyber Security Engineer with proven, hands-on CrowdStrike implementation expertise.

This is an engineering-focused role, not a SOC Analyst position. We are looking for someone who has been responsible for deploying, configuring and enhancing CrowdStrike within large enterprise environments.

The Role

You'll join an established cyber security programme, taking ownership of CrowdStrike engineering activities across enterprise infrastructure, working closely with security, infrastructure and cloud teams.

Key responsibilities include:

• Deploying and configuring CrowdStrike Falcon across enterprise environments
• Managing CrowdStrike policies, sensor deployments and platform optimisation
• Designing and implementing endpoint security controls
• Integrating CrowdStrike with technologies including Active Directory, ServiceNow, SIEM and SOAR platforms
• Developing detection rules, response workflows and security policies
• Supporting threat hunting and improving endpoint visibility
• Working across Windows server, desktop and cloud workloads
• Providing technical expertise throughout implementation and operational phases

Essential Experience

We're particularly interested in candidates who have demonstrable hands-on experience with:

• Enterprise deployment of CrowdStrike Falcon
• Falcon sensor rollout and life cycle management
• Policy creation and tuning
• Host groups, prevention policies and detection management
• Incident response and threat hunting using CrowdStrike
• Falcon Complete, Falcon Insight or Falcon Prevent
• Integration with Microsoft Sentinel, Splunk, QRadar or similar SIEM platforms
• Active Directory integration
• Enterprise-scale security engineering

Desirable Experience

• Microsoft Defender for Endpoint (MDE)
• SentinelOne
• Rapid7
• Carbon Black
• Microsoft Sentinel
• XSOAR or other SOAR platforms
• Azure, AWS or GCP security
• PowerShell or Python automation
• Zero Trust or enterprise security architecture