JOBSEARCHER

Security SIEM Optimization Consultant (CrowdStrike Focus)

HT GroupAustin, TXApril 29th, 2026
Security SIEM Optimization Consultant (CrowdStrike Focus) This engagement focuses on optimizing a large-scale security monitoring environment built on CrowdStrike SIEM and associated services. The consultant will enhance detection, monitoring, and response capabilities by expanding telemetry, integrating additional log sources, and improving visibility through dashboards and reporting. The role will contribute to strengthening overall security posture by increasing endpoint visibility, improving signal quality, and enabling more effective threat detection and response. Key Objectives:Expand and optimize SIEM telemetry coverageIntegrate additional high-value log sourcesImprove dashboards for both operational teams and leadershipEnhance detection accuracy and monitoring effectivenessProvide clearer insights into endpoint risk and security performanceResponsibilities:Evaluate current SIEM configuration, telemetry coverage, and data ingestionEnable and fine-tune telemetry to improve visibility and reduce noiseIdentify and onboard new high-value log sourcesDesign and enhance dashboards aligned with SOC and leadership needsSupport implementation and adoption of additional CrowdStrike capabilitiesValidate data quality, normalization, and correlation within the SIEMCollaborate with cross-functional teams including security and IT operationsIdentify gaps, risks, and opportunities for improving detection and monitoringProvide regular status updates and executive-level reportingDevelop documentation and recommendations to support ongoing improvementsDeliverables:Summary of work performed and capabilities deliveredDocumentation for telemetry configuration, log integrations, and dashboardsDemonstrated improvements in visibility, detection, and monitoringStrategic recommendations for future enhancementsRequired Qualifications:8+ years of experience in documentation, reporting, and knowledge transfer8+ years of experience engaging stakeholders and communicating with executives8+ years of experience in SIEM detection engineering and alert tuning8+ years of experience with log integration and data normalization3+ years of hands-on experience with CrowdStrike SIEM and dashboard developmentPreferred Qualifications:5+ years of broader SIEM platform and dashboard development experience#TECHIND