Job Description

Job Description:
Client is seeking a highly experienced Senior SOC Consultant/Engineer specializing in CrowdStrike to support a major client's hybrid IT/OT security environment. This role blends advanced SOC/NOC engineering and analysis with hands-on OT security device design, build, installation, and integration, specifically Nozomi Networks.


The ideal candidate will have deep expertise across CrowdStrike (SIEM, EDR, VM), Fortinet/FortiGate firewalls, and OT monitoring technologies, and will play an integral role in operationalizing a new SOC/NOC environment for a critical customer.



Key Responsibilities

Project Responsibilities

• Provide advanced SOC analyst coverage to review, triage, and investigate alerts generated by the customer's monitoring setup.
• Develop runbooks, operational reporting, processes, and governance required for SOC/NOC steady-state operations and a secure go-live.
• Support integration work for monitoring and alert pipelines related to OT and IT systems.

Core Duties

Onboarding & Access Management

• Provision SOC analyst accounts and roles within CrowdStrike, Nozomi, and Fortinet tools.
• Validate secure connectivity including VPN, jump hosts, and OT access controls.
• Ensure proper permissions and tool access for SOC/NOC teams.

Alert Understanding & Triage

• Analyze, classify, enrich, and route security alerts according to defined SOPs.
• Create and manage cases/tickets in accordance with severity and handling procedures.
• Perform deeper analysis for suspicious behaviors and escalate as needed.

Incident Coordination

• Initiate and run incident bridges across IT and OT stakeholders.
• Maintain real-time incident timelines, evidence notes, and decision logs.
• Drive root-cause identification and ensure accurate documentation.

Escalation Management

• Follow the defined escalation matrix and severity model.
• Notify and engage on-call teams, security leadership, third-party vendors, and engineering teams.
• Ensure timely communication and proper escalation hygiene.

Reporting & Documentation

• Produce daily operational reports, incident summaries, and advanced analysis.
• Develop Post-Incident Review (PIR) documentation and recommend improvements.
• Contribute to SOC/NOC knowledge base updates and runbook refinement.

Technical Environment

• CrowdStrike (SIEM, EDR, VM modules)
• Nozomi Networks (OT security monitoring, passive detection, asset visibility)
• Fortinet & FortiGate Firewalls
• OT/ICS/SCADA networks, segmented architectures
• Hybrid IT/OT enterprise environments

Required Skills & Experience

CrowdStrike Expertise

• Hands-on engineering and operational use of CrowdStrike SIEM, EDR, and VM.
• Experience configuring detections, log pipelines, dashboards, and integrations.
• Ability to perform advanced investigations using CrowdStrike Falcon.

OT Security Engineering (Must-Have)

• Design, build, installation, and integration experience with OT security solutions-especially Nozomi.
• Strong understanding of OT network architectures (Purdue Model).
• Familiarity with ICS/SCADA protocols and constraints.

SOC/NOC Operations

• 5 12+ years of SOC/NOC experience (L3 L4 level preferred).
• Significant experience with incident handling, threat hunting, and escalation.
• Ability to create runbooks, workflows, KPIs, and process documentation.

Network & Security Tooling

• Experience with Fortinet platforms (FortiGate, FortiAnalyzer, FortiManager).
• Understanding of firewalls, IDS/IPS, segmentation, and OT network flows.
• Experience ingesting logs and monitoring across IT+OT ecosystems.

Preferred Qualifications

• Experience in critical infrastructure, utilities, manufacturing, or heavy industry environments.
• Prior involvement in SOC/NOC build-outs, technology onboarding, or greenfield implementations.

Certifications such as:

• CrowdStrike CCFA / CCFH
• GICSP, GCIA, GCFA
• CISSP, CEH
• NSE Certifications (Fortinet)

Job Tags

Similar Jobs