? Melbourne CBD | Onsite at a financial institution | 12 month contract Want to own CrowdStrike Falcon in production at enterprise scale? We need a hands-on Falcon engineer on a 12-month contract to build, automate and improve endpoint and cloud protection for a leading financial institution. Onsite requirement: You’ll work onsite at our client’s office in Melbourne CBD, so you must be able to attend in person. What you’ll do
• Build and run Falcon: sensor deployment and health, host groups, prevention and response policies, exclusions, RBAC and update rings
• Extend Falcon coverage to GCP compute and Kubernetes workloads, including operators, admission controls and image analysis
• Write Terraform modules and pipelines for Falcon, cloud onboarding and Kubernetes components
• Build automation and integrations in Python (and some Java) using Falcon APIs, SDKs and event streams
• Send Falcon detections, incidents and asset data into Google SecOps and ServiceNow
• Work with SOC analysts to tune detection and response policies, cutting noise and speeding up response
• Evaluate AI-assisted triage, with human approvals, audit trails and false-positive safeguards
• Fix coverage gaps, policy conflicts and failed integrations, and keep runbooks and change records current What you’ll bring
• Hands-on production experience with CrowdStrike Falcon (deployment, policies,



sensor lifecycle, RBAC, troubleshooting)
• Python automation against Falcon APIs, including auth, scopes, retries and failure handling
• Robust Terraform

skills:
modules, state, pipelines, testing and drift management
• GCP knowledge: organisations, projects, IAM, service accounts, compute and networking
• Kubernetes and container security experience
• Experience building cloud-native integrations in Python and Java
• A solid grasp of threat detection, incident response and SOC handoff Nice to have
• Falcon Cloud Security, Fusion SOAR, Foundry or Charlotte AI
• The CrowdStrike Terraform provider and Kubernetes deployment modules
• Google SecOps, ServiceNow, CI/CD or enterprise identity integration
• Experience in regulated financial services Why apply
• 12-month contract with the possibility of extension
• Real production ownership of a critical security platform
• Work across endpoint, cloud, automation and AI-assisted SecOps The process includes a scenario-based technical interview, so be ready to talk about systems you’ve personally built and run. ? Apply now with your CV, highlighting your experience. #CrowdStrike #CyberSecurity #CloudSecurity #Terraform #Kubernetes #GCP #Python #MelbourneJobs #ContractJobs #Hiring

📌 Senior CrowdStrike Engineer (Sydney)
🏢 Velqyn
📍 Sydney