Security Consultant – CrowdStrike Assurance

Security Consultant required to mature CrowdStrike security assurance across AWS and Azure within a highly regulated enterprise environment. CrowdStrike has been deployed as part of a security uplift programme, but assurance processes and capabilities require further development. The SME will assess the current position, identify gaps and improve how security findings are managed through remediation and closure.

Responsibilities

Assess and improve CrowdStrike assurance capabilities across AWS and Azure; Identify gaps in cloud security coverage, configuration and assurance processes; Improve management of misconfigurations, false positives, exceptions and mitigating controls; Establish clear remediation and finding lifecycle processes; Assess attack-path visibility across Azure and AWS, including gaps between CrowdStrike and Microsoft Defender; Evaluate CrowdStrike alongside native AWS/Azure security tooling and other assurance capabilities; Improve cloud asset context and ownership by mapping accounts/resources to product groups and Prod/Dev/Test environments; Explore integration with CMDB and asset-management tooling; Help develop consolidated, single-pane-of-glass security assurance and reporting

Requirements

Strong hands-on CrowdStrike experience, ideally cloud security/CSPM/exposure management; Strong AWS and Azure security knowledge; Experience with Microsoft Defender for Cloud; Cloud security assurance, posture management and misconfiguration remediation; Security finding lifecycle, false-positive and mitigating-control management; Cloud asset mapping and CMDB integration; Experience operating within regulated, risk-averse enterprise environments

Nice to have

Technically strong cloud security SME who can quickly assess the current CrowdStrike implementation, identify overlooked gaps and deliver pragmatic improvements to cloud security assurance

Benefits

Outside IR35