Security Engineer

Security Engineer – Mid – (HSEN) – Crowdstrike Engineer

(Anti-Virus and Security Applications)

Summary:

SOFITC is seeking a Security Engineer (Mid-level) with Crowdstrike experience to support the DHS Enterprise Engineering Division within the Office of the Chief Information Officer (OCIO). This role is helps support the architecture, design, engineering, Tier 3 operations support, maintenance, and management of the network and security infrastructure. This program portfolio includes management and oversight of the technical infrastructure and security tools, sensors, servers, and data storage devices to support the DHS Network Operations Security Center (NOSC) Cyber (SOC) and other DHS stakeholders and Components.

Duties/Responsibilities:

· At least 5 years or more experience in security engineering with an emphasis on administering and/or configuring Crowdstrike implementations.

· Deployment & Configuration: Install, configure, and maintain CrowdStrike Falcon across endpoints, ensuring seamless integration with existing infrastructure.

· Security Monitoring: Continuously monitor and analyze security events using CrowdStrike Falcon to detect and respond to incidents in real-time.

· Threat Detection & Response: Investigate potential threats, work on proactive measures, and provide response actions to mitigate risks effectively.

· System Tuning & Optimization: Optimize the performance of the CrowdStrike platform, including fine-tuning security policies to reduce false positives while maintaining high security standards.

· Incident Investigation: Perform in-depth analysis of alerts, incidents, and anomalies to identify attack patterns and implement corrective actions.

· Collaboration: Work closely with other cybersecurity teams and IT departments to ensure the organization's endpoints are protected and aligned with overall security strategies.

· Knowledge Sharing & Training: Provide guidance and training to internal teams regarding CrowdStrike tools, best practices, and cybersecurity threats.

· Documentation & Reporting: Document system configurations, troubleshooting steps, and incident resolutions. Prepare regular security reports for leadership and stakeholders.

· Assist in engineering solutions with the applications above to provide expanded functionality and scale capabilities to the customers’ requirements.

· Support project goals, knowledge and assist task management of teams in an Agile environment.

· Coordinate with team on engineering solutions with the applications above to provide expanded functionality and scale capabilities to the customers’ requirements.

· Work with NOSC analysts to continuously evaluate and identify areas of improvement in NOSC applications and automations.

· Ensuring the security tools and infrastructure are available and operational from the perimeter down to the endpoints and data itself

· Providing support to maintaining and maturing security tool architecture for security operations monitoring

· Develop and maintain installation, configuration, and security procedures.

· Responsible for daily system monitoring, verifying the integrity and availability of all hardware, server resources, logs, systems and key processes.

· Establish working relationships with vendors to ensure alignment of current and future set government requirement and emerging capabilities.

Minimum Qualifications / Requirements

· At least 5 years or more of security/network engineering and architecture experience (NOC, SOC), in supporting, configuring, monitoring, and troubleshooting within a large enterprise security environment.

· Technical acumen to include extensive experience deploying, managing, and maintaining a wide range of security tools.

· Must be resourceful in multitasking tasks and projects and communicating in a dynamic network.

· Must have practical knowledge of network and security tools and how it is administered and integrated into a SOC/NOC environment.

· Must be willing to participate to a rotating on-call support (24/7/365) for nights, weekends, holiday issues.

Experience/Years of Relevant Experience:

Excellent verbal and written communication skills

Ability to meet deadlines and work independently.

Required Experience 5 years.

Education:

BA / BS in a Science, Technology, Engineering, Cybersecurity Management field

Certifications (Not Required):

CompTIA Security+

Software/Hardware Experience Desired

Crowdstrike

Clearance:

Must be able to attain/maintain DHS EOD clearance.

Must be a US Citizen and pass a background check.

Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by SOFITC and/or required by SOFITC’s Client(s)/Customer(s).

Location:

Location: Preferable - National Capital Area or Stennis Data Center, MS

Telework Authorized, Remote Hybrid

Security Engineer – Mid – (HSEN) – Crowdstrike Engineer

(Anti-Virus and Security Applications)

Summary:

SOFITC is seeking a Security Engineer (Mid-level) with Crowdstrike experience to support the DHS Enterprise Engineering Division within the Office of the Chief Information Officer (OCIO). This role is helps support the architecture, design, engineering, Tier 3 operations support, maintenance, and management of the network and security infrastructure. This program portfolio includes management and oversight of the technical infrastructure and security tools, sensors, servers, and data storage devices to support the DHS Network Operations Security Center (NOSC) Cyber (SOC) and other DHS stakeholders and Components.

Duties/Responsibilities:

· At least 5 years or more experience in security engineering with an emphasis on administering and/or configuring Crowdstrike implementations.

· Deployment & Configuration: Install, configure, and maintain CrowdStrike Falcon across endpoints, ensuring seamless integration with existing infrastructure.

· Security Monitoring: Continuously monitor and analyze security events using CrowdStrike Falcon to detect and respond to incidents in real-time.

· Threat Detection & Response: Investigate potential threats, work on proactive measures, and provide response actions to mitigate risks effectively.

· System Tuning & Optimization: Optimize the performance of the CrowdStrike platform, including fine-tuning security policies to reduce false positives while maintaining high security standards.

· Incident Investigation: Perform in-depth analysis of alerts, incidents, and anomalies to identify attack patterns and implement corrective actions.

· Collaboration: Work closely with other cybersecurity teams and IT departments to ensure the organization's endpoints are protected and aligned with overall security strategies.

· Knowledge Sharing & Training: Provide guidance and training to internal teams regarding CrowdStrike tools, best practices, and cybersecurity threats.

· Documentation & Reporting: Document system configurations, troubleshooting steps, and incident resolutions. Prepare regular security reports for leadership and stakeholders.

· Assist in engineering solutions with the applications above to provide expanded functionality and scale capabilities to the customers’ requirements.

· Support project goals, knowledge and assist task management of teams in an Agile environment.

· Coordinate with team on engineering solutions with the applications above to provide expanded functionality and scale capabilities to the customers’ requirements.

· Work with NOSC analysts to continuously evaluate and identify areas of improvement in NOSC applications and automations.

· Ensuring the security tools and infrastructure are available and operational from the perimeter down to the endpoints and data itself

· Providing support to maintaining and maturing security tool architecture for security operations monitoring

· Develop and maintain installation, configuration, and security procedures.

· Responsible for daily system monitoring, verifying the integrity and availability of all hardware, server resources, logs, systems and key processes.

· Establish working relationships with vendors to ensure alignment of current and future set government requirement and emerging capabilities.

Minimum Qualifications / Requirements

· At least 5 years or more of security/network engineering and architecture experience (NOC, SOC), in supporting, configuring, monitoring, and troubleshooting within a large enterprise security environment.

· Technical acumen to include extensive experience deploying, managing, and maintaining a wide range of security tools.

· Must be resourceful in multitasking tasks and projects and communicating in a dynamic network.

· Must have practical knowledge of network and security tools and how it is administered and integrated into a SOC/NOC environment.

· Must be willing to participate to a rotating on-call support (24/7/365) for nights, weekends, holiday issues.

Experience/Years of Relevant Experience:

Excellent verbal and written communication skills

Ability to meet deadlines and work independently.

Required Experience 5 years.

Education:

BA / BS in a Science, Technology, Engineering, Cybersecurity Management field

Certifications (Not Required):

CompTIA Security+

Software/Hardware Experience Desired

Crowdstrike

Clearance:

Must be able to attain/maintain DHS EOD clearance.

Must be a US Citizen and pass a background check.

Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by SOFITC and/or required by SOFITC’s Client(s)/Customer(s).

Location:

Location: Preferable - National Capital Area or Stennis Data Center, MS

Telework Authorized, Remote Hybrid