Senior CrowdStrike SIEM Administrator

Persistent Systems · IT Services & Consulting

BENGALURU
Hybrid
Posted today
Cybersecurity

Apply on Persistent Systems Create resume for this job

About the job

About Persistent

We are an AI-led, platform-driven Digital Engineering and Enterprise Modernization partner, combining deep technical expertise and industry experience to help our clients anticipate what’s next. Our offerings and proven solutions create a unique competitive advantage for our clients by giving them the power to see beyond and rise above. We work with many industry-leading organizations across the world, including 18 of the Fortune 50 companies, 7 of the 10 top US banks, 9 of the 10 technology companies, and numerous innovators across the healthcare ecosystem.

Our disruptor’s mindset, commitment to client success, and agility to thrive in the dynamic environment have enabled us to sustain our growth momentum. Persistent has been recognized across top industry platforms for innovation, leadership, and inclusion. We have delivered 26 sequential quarters of growth with $487.6M in Q4 FY26 revenue, up 7.8% Q-o-Q and 20.0% Y-o-Y. Our 29,500+ global team members, located in 21 countries, have been instrumental in helping the market leaders transform their industries. We received five awards at the ISG (Information Services Group) Provider Lens™ Awards 2026 and, for the second year in a row, were awarded the Growth Honor of the Year at the Everest Group Elevate 2026.

About Position:

We are seeking an experienced Senior CrowdStrike SIEM Administrator to manage, optimize, and support enterprise security monitoring and log management capabilities using CrowdStrike and SIEM platforms. This role is responsible for ensuring reliable data ingestion, log collection, detection engineering, search optimization, dashboard development, and operational support across security environments. The ideal candidate will partner with SOC, Incident Response, Threat Hunting, Infrastructure, and Security Engineering teams to enhance visibility, improve threat detection, and strengthen the organization's cyber defense capabilities.

Role: Senior CrowdStrike SIEM Administrator

Location: Bengaluru

Experience: Between 8 to 12 Years

Job Type: Full Time Employment

What You'll Do:

Administer, configure, and optimize CrowdStrike Falcon and associated SIEM platforms to support enterprise security monitoring requirements.

Configure and maintain data ingestion pipelines, log collectors, parsers, connectors, dashboards, retention policies, and access controls.

Monitor platform health, ingestion performance, connector status, storage utilization, licensing consumption, and overall system reliability.

Develop, enhance, and tune detection rules, correlation logic, alerts, dashboards, and security monitoring use cases.

Build and optimize search queries, investigations, reports, and operational analytics to support SOC and incident response functions.

Troubleshoot data ingestion issues, log source failures, connector problems, parser errors, and data quality concerns.

Integrate CrowdStrike with endpoint security, cloud platforms, identity solutions, vulnerability management, threat intelligence, and ITSM tools.

Support incident investigations by providing log analysis, event correlation, telemetry review, and forensic support.

Manage platform upgrades, configuration changes, patches, and maintenance activities.

Develop operational runbooks, platform documentation, troubleshooting guides, and knowledge management resources.

Support audit requirements, governance activities, and compliance reporting initiatives.

Collaborate with SOC analysts, threat hunters, incident responders, and security engineers to continuously improve detection coverage and operational effectiveness.

Expertise You'll Bring:

8-12 years of experience in SIEM Administration, Security Operations, Security Engineering, Cybersecurity Monitoring, or Threat Detection.

Strong hands-on experience administering CrowdStrike Falcon and enterprise SIEM or log management platforms.

Expertise in security monitoring, log collection, event correlation, detection engineering, and operational analytics.

Strong experience creating and tuning detection rules, dashboards, reports, alerts, and threat-hunting queries.

Knowledge of endpoint telemetry, endpoint detection and response (EDR), threat intelligence, and security event management processes.

Experience working with common log sources including Windows, Linux, Active Directory, firewalls, IDS/IPS, cloud services, databases, web applications, and network devices.

Strong understanding of incident response workflows, security operations processes, and cyber threat detection methodologies.

Experience with APIs, automation, scripting, and platform integrations using Python, PowerShell, REST APIs, or similar technologies.

Familiarity with ITSM platforms such as ServiceNow and integration with security operations workflows.

Understanding of MITRE ATT&CK, Cyber Kill Chain, threat hunting methodologies, and detection engineering best practices.

Experience supporting cloud security monitoring across Azure, AWS, or Google Cloud environments.

Strong troubleshooting, analytical, and problem-solving capabilities in complex enterprise environments.

Excellent communication, stakeholder management, and technical documentation skills.

Bachelor's degree in Computer Science, Information Technology, Cyber Security, Engineering, or a related discipline.

CrowdStrike Falcon certifications, Splunk certifications, Microsoft Security certifications, GIAC, GCIH, GCFA, Security+, or equivalent cybersecurity certifications are advantageous.

Benefits:

Competitive salary and benefits package

Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications

Opportunity to work with cutting-edge technologies

Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards

Annual health check-ups

Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

We support hybrid work and flexible hours to fit diverse lifestyles.

Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.

If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment.

Let's unleash your full potential at Persistent - persistent.com/careers

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."

Apply on Persistent Systems