Security Consultant - CrowdStrike Assurance

Security Consultant required to mature CrowdStrike security assurance across AWS and Azure within a highly regulated enterprise environment. CrowdStrike has been deployed as part of a security uplift programme, but assurance processes and capabilities require further development. The SME will assess the current position, identify gaps and improve how security findings are managed through remediation and closure.

The following information provides an overview of the skills, qualities, and qualifications needed for this role.

Key Responsibilities

• Assess and improve CrowdStrike assurance capabilities across AWS and Azure.
• Identify gaps in cloud security coverage, configuration and assurance processes.
• Improve management of misconfigurations, false positives, exceptions and mitigating controls.
• Establish clear remediation and finding life cycle processes.
• Assess attack-path visibility across Azure and AWS, including gaps between CrowdStrike and Microsoft Defender.
• Evaluate CrowdStrike alongside native AWS/Azure security tooling and other assurance capabilities.
• Improve cloud asset context and ownership by mapping accounts/resources to product groups and Prod/Dev/Test environments.
• Explore integration with CMDB and asset-management tooling.
• Help develop consolidated, single-pane-of-glass security assurance and reporting.

Key Experience

• Strong hands-on CrowdStrike experience, ideally cloud security/CSPM/exposure management.
• Strong AWS and Azure security knowledge.
• Experience with Microsoft Defender for Cloud.
• Cloud security assurance, posture management and misconfiguration remediation.
• Security finding life cycle, false-positive and mitigating-control management.
• Cloud asset mapping and CMDB integration.
• Experience operating within regulated, risk-averse enterprise environments. xwzovoh

Ideal profile: A technically strong cloud security SME who can quickly assess the current CrowdStrike implementation, identify overlooked gaps and deliver pragmatic improvements to cloud security assurance.