Find your next job. Start today.

Direct from employer

Subject Matter Expert (Support&Ops)

Date Posted: Oct 13, 2026
Apply on company website

Job Detail

  • location_on
    Location Uttar Pradesh, India
  • desktop_windows
    Job Type: Full Time/Permanent
  • schedule
    Shift:
  • analytics
    Career Level:
  • group
    Positions:
  • calendar_view_day
    Experience:
  • male
    Gender: No Preference
  • school
    Degree:
  • calendar_month
    Apply Before: Dec 07, 2026
Email to Friend Add to Favourite Report Abuse

Job Description

Job Summary

Role Summary

The CrowdStrike Falcon L3 Engineer is responsible for advanced administration, engineering, troubleshooting, threat hunting, incident response, and operational support of the CrowdStrike Falcon platform. The role serves as the highest technical escalation point for endpoint security incidents, platform optimization, integrations, and security investigations.

Key Responsibilities

Platform Administration

  • Manage and administer the CrowdStrike Falcon platform.
  • Configure and maintain prevention policies, detection policies, firewall management, USB device control, and sensor deployment.
  • Perform health checks and platform optimization activities.
  • Manage Falcon modules including:
    • Falcon Prevent
    • Falcon Insight
    • Falcon Discover
    • Falcon Device Control
    • Falcon Firewall Management
    • Falcon Identity Protection
    • Falcon Spotlight

Incident Response & Threat Hunting

  • Lead investigation of advanced malware, ransomware, phishing, and endpoint compromise incidents.
  • Perform root cause analysis of security events.
  • Conduct proactive threat hunting using Falcon Real-Time Response (RTR).
  • Analyze Indicators of Compromise (IOC) and Indicators of Attack (IOA).
  • Support containment, eradication, and recovery activities.

Engineering & Automation

  • Design security use cases and detection rules.
  • Develop automation using Falcon APIs.
  • Integrate CrowdStrike with:
    • Microsoft Sentinel
    • Splunk
    • QRadar
    • ServiceNow
    • SOAR platforms
  • Create custom dashboards, reporting, and alerting mechanisms.

Advanced Troubleshooting

  • Act as L3 escalation point for CrowdStrike platform issues.
  • Troubleshoot sensor installation and upgrade failures.
  • Resolve endpoint communication and performance issues.
  • Support large-scale deployment and migration initiatives.

Security Governance & Compliance

  • Support security audits and compliance requirements.
  • Generate vulnerability and threat exposure reports.
  • Implement security best practices and hardening recommendations.
  • Participate in security reviews and risk assessments.

Technical Skills Required

Mandatory

  • CrowdStrike Falcon Administration
  • Falcon RTR (Real-Time Response)
  • EDR/XDR Operations
  • Threat Hunting
  • Endpoint Security
  • Incident Response
  • Malware Analysis
  • IOC/IOA Investigation
  • Windows Server Administration
  • Windows 10/11 Endpoint Management

Key Responsibilities

Role Summary

The CrowdStrike Falcon L3 Engineer is responsible for advanced administration, engineering, troubleshooting, threat hunting, incident response, and operational support of the CrowdStrike Falcon platform. The role serves as the highest technical escalation point for endpoint security incidents, platform optimization, integrations, and security investigations.

Key Responsibilities

Platform Administration

  • Manage and administer the CrowdStrike Falcon platform.
  • Configure and maintain prevention policies, detection policies, firewall management, USB device control, and sensor deployment.
  • Perform health checks and platform optimization activities.
  • Manage Falcon modules including:
    • Falcon Prevent
    • Falcon Insight
    • Falcon Discover
    • Falcon Device Control
    • Falcon Firewall Management
    • Falcon Identity Protection
    • Falcon Spotlight

Incident Response & Threat Hunting

  • Lead investigation of advanced malware, ransomware, phishing, and endpoint compromise incidents.
  • Perform root cause analysis of security events.
  • Conduct proactive threat hunting using Falcon Real-Time Response (RTR).
  • Analyze Indicators of Compromise (IOC) and Indicators of Attack (IOA).
  • Support containment, eradication, and recovery activities.

Engineering & Automation

  • Design security use cases and detection rules.
  • Develop automation using Falcon APIs.
  • Integrate CrowdStrike with:
    • Microsoft Sentinel
    • Splunk
    • QRadar
    • ServiceNow
    • SOAR platforms
  • Create custom dashboards, reporting, and alerting mechanisms.

Advanced Troubleshooting

  • Act as L3 escalation point for CrowdStrike platform issues.
  • Troubleshoot sensor installation and upgrade failures.
  • Resolve endpoint communication and performance issues.
  • Support large-scale deployment and migration initiatives.

Security Governance & Compliance

  • Support security audits and compliance requirements.
  • Generate vulnerability and threat exposure reports.
  • Implement security best practices and hardening recommendations.
  • Participate in security reviews and risk assessments.

Technical Skills Required

Mandatory

  • CrowdStrike Falcon Administration
  • Falcon RTR (Real-Time Response)
  • EDR/XDR Operations
  • Threat Hunting
  • Endpoint Security
  • Incident Response
  • Malware Analysis
  • IOC/IOA Investigation
  • Windows Server Administration
  • Windows 10/11 Endpoint Management

Skill Requirements

Role Summary

The CrowdStrike Falcon L3 Engineer is responsible for advanced administration, engineering, troubleshooting, threat hunting, incident response, and operational support of the CrowdStrike Falcon platform. The role serves as the highest technical escalation point for endpoint security incidents, platform optimization, integrations, and security investigations.

Key Responsibilities

Platform Administration

  • Manage and administer the CrowdStrike Falcon platform.
  • Configure and maintain prevention policies, detection policies, firewall management, USB device control, and sensor deployment.
  • Perform health checks and platform optimization activities.
  • Manage Falcon modules including:
    • Falcon Prevent
    • Falcon Insight
    • Falcon Discover
    • Falcon Device Control
    • Falcon Firewall Management
    • Falcon Identity Protection
    • Falcon Spotlight

Incident Response & Threat Hunting

  • Lead investigation of advanced malware, ransomware, phishing, and endpoint compromise incidents.
  • Perform root cause analysis of security events.
  • Conduct proactive threat hunting using Falcon Real-Time Response (RTR).
  • Analyze Indicators of Compromise (IOC) and Indicators of Attack (IOA).
  • Support containment, eradication, and recovery activities.

Engineering & Automation

  • Design security use cases and detection rules.
  • Develop automation using Falcon APIs.
  • Integrate CrowdStrike with:
    • Microsoft Sentinel
    • Splunk
    • QRadar
    • ServiceNow
    • SOAR platforms
  • Create custom dashboards, reporting, and alerting mechanisms.

Advanced Troubleshooting

  • Act as L3 escalation point for CrowdStrike platform issues.
  • Troubleshoot sensor installation and upgrade failures.
  • Resolve endpoint communication and performance issues.
  • Support large-scale deployment and migration initiatives.

Security Governance & Compliance

  • Support security audits and compliance requirements.
  • Generate vulnerability and threat exposure reports.
  • Implement security best practices and hardening recommendations.
  • Participate in security reviews and risk assessments.

Technical Skills Required

Mandatory

  • CrowdStrike Falcon Administration
  • Falcon RTR (Real-Time Response)
  • EDR/XDR Operations
  • Threat Hunting
  • Endpoint Security
  • Incident Response
  • Malware Analysis
  • IOC/IOA Investigation
  • Windows Server Administration
  • Windows 10/11 Endpoint Management

Other Requirements

Role Summary

The CrowdStrike Falcon L3 Engineer is responsible for advanced administration, engineering, troubleshooting, threat hunting, incident response, and operational support of the CrowdStrike Falcon platform. The role serves as the highest technical escalation point for endpoint security incidents, platform optimization, integrations, and security investigations.

Key Responsibilities

Platform Administration

  • Manage and administer the CrowdStrike Falcon platform.
  • Configure and maintain prevention policies, detection policies, firewall management, USB device control, and sensor deployment.
  • Perform health checks and platform optimization activities.
  • Manage Falcon modules including:
    • Falcon Prevent
    • Falcon Insight
    • Falcon Discover
    • Falcon Device Control
    • Falcon Firewall Management
    • Falcon Identity Protection
    • Falcon Spotlight

Incident Response & Threat Hunting

  • Lead investigation of advanced malware, ransomware, phishing, and endpoint compromise incidents.
  • Perform root cause analysis of security events.
  • Conduct proactive threat hunting using Falcon Real-Time Response (RTR).
  • Analyze Indicators of Compromise (IOC) and Indicators of Attack (IOA).
  • Support containment, eradication, and recovery activities.

Engineering & Automation

  • Design security use cases and detection rules.
  • Develop automation using Falcon APIs.
  • Integrate CrowdStrike with:
    • Microsoft Sentinel
    • Splunk
    • QRadar
    • ServiceNow
    • SOAR platforms
  • Create custom dashboards, reporting, and alerting mechanisms.

Advanced Troubleshooting

  • Act as L3 escalation point for CrowdStrike platform issues.
  • Troubleshoot sensor installation and upgrade failures.
  • Resolve endpoint communication and performance issues.
  • Support large-scale deployment and migration initiatives.

Security Governance & Compliance

  • Support security audits and compliance requirements.
  • Generate vulnerability and threat exposure reports.
  • Implement security best practices and hardening recommendations.
  • Participate in security reviews and risk assessments.

Technical Skills Required

Mandatory

  • CrowdStrike Falcon Administration
  • Falcon RTR (Real-Time Response)
  • EDR/XDR Operations
  • Threat Hunting
  • Endpoint Security
  • Incident Response
  • Malware Analysis
  • IOC/IOA Investigation
  • Windows Server Administration
  • Windows 10/11 Endpoint Management

Source: HCLTech careers — Read the original posting and apply

This role is listed by the employer on its own careers site. Kaam Ki Khoj does not process applications for it.

Company Overview

HCLTech
HCLTech · Noida, Uttar Pradesh, India
4,246 open roles

HCLTech is an employer in the IT/Computers - Software, Software Services sector with operations in India. This is a directory listing maintained by Kaam Ki Khoj so that candidates can find the organisation; it is not an official company page and Kaam... Read More

Related Jobs

One upload, every employer

Let the right employer find you

Upload your CV once — we read it, build your profile and put you in front of every employer hiring on Kaam Ki Khoj. No forms, no fees.

Upload your CV Browse jobs