Endpoint Security Lead - CrowdStrike jobs in United States
cer-icon
Apply on Employer Site
company-logo

AIG · 1 month ago

Endpoint Security Lead - CrowdStrike

AIG is a global leader in commercial and personal insurance solutions, and they are seeking a CrowdStrike Endpoint Security Lead to join their Enterprise Information Security Organization. This role is responsible for overseeing the deployment and optimization of the CrowdStrike Falcon platform to ensure endpoint protection against advanced threats while collaborating with various IT teams on security initiatives.

BankingFinancial ServicesInsurance
check
H1B Sponsor Likelynote

Responsibilities

Serve as the primary administrator and SME for the CrowdStrike Falcon platform
Manage endpoint agent deployment, policy configurations, sensor health, and reporting
Work with stakeholders to Test, maintain, and enforce security prevention policies and procedures of CrowdStrike Falcon Platform
Lead endpoint protection posture improvements, including policy tuning and prevention rule updates
Ensure sensor coverage and compliance across workstations, servers, and cloud workloads
Monitor and triage CrowdStrike alerts, detections, and dashboards
Work with SOC and Incident Response teams to investigate and remediate endpoint threats
Leverage Falcon Insight and Real Time Response to contain, isolate, and eradicate threats
Perform post-incident analysis and implement preventative measures
Manage CrowdStrike Identity Protection/ITDR modules and integrations
Support MFA, conditional access, and endpoint identity controls
Integrate CrowdStrike with SIEM, SOAR, vulnerability management tools, and other security platforms
Lead CrowdStrike version upgrades, module rollouts, and configuration changes
Develop automation and workflows using APIs, scripts, and reporting tools
Produce executive-level and operational security reports – including monthly true-up process indicating CrowdStrike coverage globally
Ensure endpoint security posture aligns with frameworks (NIST, CIS, ISO, etc.)
Support internal/external audits and regulatory compliance requirements
Provide technical directions to junior security analysts and engineers
Work closely with IT, Infrastructure, and Desktop teams on deployment strategy
Liaise with CrowdStrike support, TAMs, and product teams when necessary

Qualification

CrowdStrike Falcon PlatformEndpoint Security ManagementCloud Security AWSCloud Security AzureCyber Security PracticesVulnerability AnalysisSecurity Frameworks NISTSecurity Frameworks CISWindows & Active DirectoryScripting PowerShellScripting PythonTeam LeadershipCollaborationCommunicationProblem Solving

Required

Bachelor's degree in computer science or other technical disciplines or equivalent relevant experience
10+ years in an IT Security Engineering or Operations role with a focus on Endpoint Security Management tools
Expert level knowledge in CrowdStrike Falcon Platform
CrowdStrike DLP
Next Generation SEIM
Exposure management
Fusion SOAR
Investigate
LogScale
Host setup and management
API Configuration
Identity Protection
Intermediate level knowledge is highly desired for below platforms: Tanium, Microsoft Defender DLP for Endpoint, Lookout for Mobile, Azure WVD / Citrix, Ansible
Knowledge of cyber security practices, challenges, tools and techniques
Recent and relevant experience in vulnerability analysis and exploitation techniques
Troubleshoot issues within the product when necessary, assisting different teams, crash dumps, performance monitor and release blockers
In depth knowledge of Critical Security Controls like NIST, CIS Benchmarks, DISA STIG standards etc
Familiarity with International Security standards and Industry framework like ISO 27001/27002, PCI DSS and SOX
In depth knowledge and expertise with Infrastructure hardening and Security settings for Windows and Linux
Intermediate to Expert level knowledge on Windows & Active Directory, Unix/Linux Operating Systems
Good scripting knowledge using PowerShell, Python, Linux shell is desired
Basic knowledge of Cloud computing, Virtualization concepts and PaaS/SaaS services
Strong knowledge of TCP/IP and HTTP protocols
Be an energetic “self-starter” who is empowered to take ownership and be accountable for deliverables, both individually and as part of a growing team
Team player – able to lead, mentor, communicate, collaborate, and work effectively in a globally distributed team

Preferred

CrowdStrike Certifications (CCFA, CCFR, CCES, CCRA)
Experience with CrowdStrike Identity Protection, Falcon Discover, or Mobile
Background in large-scale enterprise deployments (50,000+ endpoints)
Cloud security experience (Azure, AWS, GCP endpoint workloads)
Experience with MDR or Falcon Complete programs
CISSP or other Security certification
Microsoft Azure or Linux Certifications
AWS Certifications

Benefits

A range of competitive benefits
Total Rewards Program
Benefits focused on your health, wellbeing and financial security
Professional development

Company

AIG is a global insurance company providing insurance products to support clients in business and in life.

H1B Sponsorship

AIG has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (2)
2024 (2)
2023 (4)
2022 (23)
2021 (5)
2020 (13)

Funding

Current Stage
Late Stage

Leadership Team

leader-logo
Kelly Lafnitzegger
Executive Vice President and Chief Human Resources Officer
linkedin
leader-logo
Charlie Fry
EVP, Reinsurance Purchasing and Risk Capital Optimization
Company data provided by crunchbase