Cyber Engineer (Crowdstrike) - #1709

Job Description

Assessment Report:

• Review of existing Host-Based Firewall, Custom IOA, Asset Discovery, Configuration Baseline, and Network Equipment Vulnerability detection scope, including configuration and log review, findings, gaps, validation results, and recommended actions.

• Remediation and Tuning Plan

• Prioritised list of configuration updates, false-positive tuning actions, rule corrections, and validation activities.

Host-Based Firewall Output:

• Provide a Host-Based Firewall artefact containing policy design findings, workstation validation results by institution and cluster, rule and host group mapping, duplicate or disabled rules, rules and policies recommended for merge or removal, identified configuration gaps, blocked traffic review observations, approved remediation actions, and the final Host-Based Firewall policy baseline.

Custom IOA Output:

• Provide a Custom IOA artefact containing rule group and policy assignment review results, IOA alert findings, validation against approved use cases, false-positive tuning recommendations, refined exclusions, redundant or unused IOA rules identified for review, rule logic or regex adjustment recommendations, and the final Custom IOA baseline.

Asset Discovery Output:

• Provide an Asset Discovery artefact containing the discovered asset listing, onboarding status, CMDB and MDOTS comparison, cluster and institution mapping, unmanaged or duplicate asset identification, inactive or decommissioned asset indicators, unsupported OS indicators, ownership status, and recommended follow-up actions.

Configuration Baseline Output:

• Provide a Configuration Baseline artefact containing exported configuration references, policy assignment mapping, policy status, host group mappings, exclusions, exception justification, identified configuration gaps, recommended remediation actions, review cadence, and final approved CrowdStrike configuration baseline.

Detect Network Equipment Vulnerability via CrowdStrike:

• Establish and provide the process for detecting network equipment vulnerabilities through CrowdStrike, identify and validate vulnerability findings against CMDB and asset ownership records, perform sample verification to eliminate false positives, provide periodic reporting on findings and remediation status, and develop the necessary operational documentation, governance framework, and knowledge transfer materials to support ongoing operations.

Testing and Validation Evidence:

• Evidence of agreed testing outcomes, including validation screenshots, test cases, findings, and closure status.

Operational Handover Guide:

• Step-by-step operational guidance for ongoing support, including troubleshooting, change handling, review cadence, and escalation path.

Knowledge Transfer Session:

• Walkthrough session with the Day 2 Operations team covering completed work, configurations, operational processes, and open items.

Qualifications

• Degree or higher in Cybersecurity, Computer Science, Engineering, or Information Systems.

• Possess at least 3 years of experience in cybersecurity, IT infrastructure, or related technical roles

• Understanding of network protocols, firewalls, and security architectures

• Good communication skills with ability to work collaboratively in teams

• Adaptable and comfortable working in fast-paced project environments

• Certification: CrowdStrike Certified Falcon Administrator, CCFA preferred

• Due to project sensitivity, we can only consider Singapore Citizen