Sr. CrowdStrike Engineer (Endpoint Security) id-6274

April 10, 2025

Your Opportunity

The Senior CrowdStrike Engineer is an individual contributor supporting endpoint security technologies, threat monitoring, and management in Schwab Cybersecurity Services. This role leads the security and infrastructure teams on the design, engineering, and implementation of technology solutions and methodologies to ensure secure endpoints. This role requires advanced level knowledge of the risk and endpoint security landscape to be able to better implement and maintain impactful security solutions.

Other Jobs You May Be Interested In

What you're good at

Leading the engineering efforts and implemention of endpoint security capabilities in CrowdStrike including EDR, NG-SIEM, DLP, IDP, and Zero Trust. Leading the implementation and adoption of CrowdStrike modules while ensuring all regulatory and compliance standards are met. Collaborating with product and project teams to understand needs and enablement with security products. Strong analysis and decision-making skills with the ability to identify opportunities to mature endpoint security offerings, participate in technical cross-functional sessions, and ensure adherence to change and configuration management principles. Assessing issues and developing resolutions to meet productivity, quality goals, and objectives.

What you have

A proven track record of experience in implementing enterprise security solutions including design, configuration, installation, customization, automation, and optimization of tools.

5+ years of experience configuring and maturing endpoint security programs, with at least 3 years of hands-on expertise in CrowdStrike Falcon (including EDR, Identity Protection, Data Protection, Exposure Management, SaaS Security, NG-SIEM, Fusion, CWP, or FIM).
Proven track record of deploying, configuring, and tuning CrowdStrike agents across enterprise environments (Windows, macOS, Linux).
Strong understanding of endpoint detection and response (EDR), threat hunting, IOC/IOA development, and real-time response (RTR).
Experience writing and updating queries using CrowdStrike Query Language, or similar SIEM query language such as Splunk.
Experience integrating CrowdStrike with SIEM/SOAR platforms.

Experience integrating multiple security tools to provide enhanced visibility and monitoring capabilities.
Experience developing advanced workflows leveraging the CrowdStrike platform.
Ability to leverage CrowdStrike telemetry to support incident response investigations.
Comfortable collaborating with SOC, threat intel, and infrastructure teams to refine detection logic and reduce false positives.
Knowledge of MITRE ATT&CK, malware behaviors, and threat actor TTPs as they relate to endpoint security.
Advanced experience with scripting (PowerShell, Python, Bash) for automation and custom response actions.
Develop and report enterprise level metrics for endpoint security controls.
Architect solutions (initial state, transition, final state architectures).
Provide compliance and audit evidence for monitored systems.
Document, publish, and maintain a knowledge base of information pertaining to the functionality, processes, and procedures related to the supported tools.

One or more endpoint security related technologies

CrowdStrike
SIEM/SOAR
DLP
FIM
Red Team
Penetration testing
Incident management and response

Qualifications

More than 7 years of progressive experience in cybersecurity engineering
CrowdStrike certifications (e.g., CCFR, CCFP) are highly desirable
Advanced experience administering and managing CrowdStrike environments, including Data Protection, Identity Protection, FIM, Next-Gen SIEM, Cloud Security, and Fusion Workflows
Ability to identify security risks and weaknesses and provide security mitigation and remediation recommendations
Demonstrated experience and expertise with multiple security controls within multiple security domains
Bachelor’s Degree in Computer Science, Engineering, or related field required
CISSP, CISM, or other relevant information security industry recognized certification preferred

Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...

DISCLAIMER