? Melbourne CBD | 2 days onsite at a financial institution | 12 month contract

Want to own CrowdStrike Falcon in production at enterprise scale? We need a hands-on Falcon engineer on a 12-month contract to build, automate and improve endpoint and cloud protection for a leading financial institution.

Onsite requirement: You’ll work onsite at our client’s office in Melbourne CBD, so you must be able to attend in person.

What you’ll do

- Build and run Falcon: sensor deployment and health, host groups, prevention and response policies, exclusions, RBAC and update rings
- Extend Falcon coverage to GCP compute and Kubernetes workloads, including operators, admission controls and image analysis
- Write Terraform modules and pipelines for Falcon, cloud onboarding and Kubernetes components
- Build automation and integrations in Python (and some Java) using Falcon APIs, SDKs and event streams
- Send Falcon detections, incidents and asset data into Google SecOps and ServiceNow
- Work with SOC analysts to tune detection and response policies, cutting noise and speeding up response
- Evaluate AI-assisted triage, with human approvals, audit trails and false-positive safeguards
- Fix coverage gaps, policy conflicts and failed integrations, and keep runbooks and change records current

What you’ll bring

- Hands-on production experience with CrowdStrike Falcon (deployment,



policies, sensor lifecycle, RBAC, troubleshooting)
- Python automation against Falcon APIs, including auth, scopes, retries and failure handling
- Solid Terraform skills: modules, state, pipelines, testing and drift management
- GCP knowledge: organisations, projects, IAM, service accounts, compute and networking
- Kubernetes and container security experience
- Experience building cloud-native integrations in Python and Java
- A solid grasp of threat detection, incident response and SOC handoff

Nice to have

- Falcon Cloud Security, Fusion SOAR, Foundry or Charlotte AI
- The CrowdStrike Terraform provider and Kubernetes deployment modules
- Google SecOps, ServiceNow, CI/CD or enterprise identity integration
- Experience in regulated financial services

Why apply

- 12-month contract with the possibility of extension
- Real production ownership of a critical security platform
- Work across endpoint, cloud, automation and AI-assisted SecOps

The process includes a scenario-based technical interview, so be ready to talk about systems you’ve personally built and run. ? Apply now with your CV, highlighting your experience.

#CrowdStrike #CyberSecurity #CloudSecurity #Terraform #Kubernetes #GCP #Python #MelbourneJobs #ContractJobs #Hiring

📌 Senior CrowdStrike Engineer (Sydney)
🏢 Velqyn
📍 Sydney