About the role
The CyberOps Engineer is responsible for the design, deployment, operation, and continuous optimization of enterprise security platforms that support threat detection, response, and vulnerability management. This role serves as a technical authority for CrowdStrike, secondary resource for Tenable, and Stellar Cyber, ensuring these platforms are correctly integrated, tuned, and delivering high-fidelity security outcomes.
The position works closely with CyberOps analysts, incident responders, and security leadership to translate business and risk requirements into scalable, reliable security platform capabilities.
What you'll do
CyberOps Platform Ownership
- Own the configuration, health, and ongoing optimization of CrowdStrike Falcon and other CrowdStrike product lines.
- Ensure platform availability, data integrity, and correct telemetry ingestion across endpoint, network, cloud, and identity sources.
- Act as the escalation point for complex platform issues impacting detection, response, or vulnerability workflows.
- Be a secondary resource for Tenable and Stellar Cyber platforms.
Threat Detection & Response Enablement
- Optimize CrowdStrike policies, prevention settings, and detections to balance protection and operational impact
- Support incident investigations by providing deep platform expertise and advanced telemetry analysis
Platform Integration & Automation
- Integrate security platforms with SIEM, SOAR, ticketing, and reporting systems
- Support API-based integrations and automation to improve operational efficiency
- Validate and onboard new client installations log sources.
Operational Excellence & Continuous Improvement
- Develop and maintain platform standards, runbooks, and operational documentation
- Identify gaps in telemetry, coverage, or detection logic and drive improvements
- Stay current with platform feature releases and recommend enhancements aligned to threat trends
Qualifications
Required:
- Hands-on experience administering CrowdStrike Falcon
- Scripting or automation experience (PowerShell, Python, APIs)
- Strong understanding of endpoint, network, identity, and cloud security telemetry
- Familiarity with the MITRE ATT&CK framework and incident response workflows
Preferred:
- Experience with additional security platforms such as SIEM, SOAR, EDR, or NDR
- Hands-on experience with Tenable (Tenable.io, Nessus)
- Hands-on experience with Stellar Cyber
- Cloud security experience (Azure, AWS, or GCP)
- Relevant security certifications (CrowdStrike, Tenable, GIAC, or equivalent)
What Success Looks Like
- Security platforms are stable, fully integrated, and delivering high-quality detections
- CyberOps analysts receive actionable alerts with reduced noise
- Vulnerability data is accurate, prioritized, and trusted by stakeholders
- Leadership has confidence in platform coverage and security visibility
Work Environment + Benefits
Netrio offers a hybrid work environment, prioritizing work-life balance, continuous learning, and a supportive team culture. We invest in our people by providing comprehensive benefits, including:
- Competitive salary
- Comprehensive benefits package
- Wellness programs and professional development opportunities.
About Netrio
Netrio is a leading MSP in North America, specializing in IT solutions for small- to mid-market enterprises. We serve over 1,000 clients across industries with services including managed IT, cybersecurity, cloud, connectivity, voice, and custom application development.
