• Provide support to the MARAD Information Assurance Program for operations, business and administrative in support of the System Authorization Process and deliverables. • Direct involvement with MARAD Program Office and the Information System Security Manager (ISSM) on cybersecurity and authority to operate (ATO) matters. • Manage MARAD’s Information System’s core documentation, in accordance with each phase of the system engineering process / System Development Life Cycle (SDLC). • Support creation/update of FIPS 199 Security Categorization document; ensure information type(s) and special considerations (if applicable) are defined. • Support creation/update security control selection listing. • Support creation/update System Security Plan (SSP). • Assist in security incident response, risk mitigation, and compliance reporting.

• Synthesize and formulate guidance from a variety of information levels and sources (technical, business, field, external) and regularly present key takeaways to the field and to senior leadership • Provide a field-actionable, in-depth and ever-evolving understanding and analysis of cloud security market relative to CrowdStrike solutions and capabilities • Provide tailored deal support (competitive surgeries & guidance), and develop a deep rapport with the field • Work closely with the rest of the Competitive Intelligence team at CrowdStrike, as well as other key stakeholders (including the office of the CTO, sales, product, and marketing teams), functioning as a primary liaison for cloud security competition which includes development of competitive support material and competitive readiness plans. • Make recommendations on sales tactics and product strategy to enable CrowdStrike to win in the market. • Be a self-starter with an ownership mentality. You will work autonomously in the development of project plans, requirements, timelines, content, and ongoing tracking/updates of the cloud competitive landscape. • Conduct win/loss analysis, using both quantitative and qualitative data source to determine why CrowdStrike wins and loses vs the competition.

• Help maintain and improve our ISO 27001 management system, ensuring controls remain effective, documented, and continuously evidenced. • Contribute to internal audits, surveillance audits, and recertification cycles, including the upcoming unified audit covering Didomi and recently acquired business units. • Track corrective actions, nonconformities, and continuous improvement initiatives, supporting the security team in driving them to closure. • Carry out recurring activities on the security calendar in support of the security team, including vulnerability scanning campaigns, quarterly access reviews, risk assessments, business continuity tests, and policy review cycles. • Triage vulnerability findings from AWS GuardDuty, Inspector, and other sources, then work with the Security Manager to define remediation priorities and follow them through to closure. • Run periodic access reviews across critical systems (Google Workspace, AWS, Slack, JAMF, GitLab, GitHub, and internal applications), surfacing findings to the Security Manager and helping ensure they are remediated. • Contribute to the security team's reviews of new tools, vendors, and SaaS applications for security and compliance risks before adoption. • Help the security team assess and harden internal workflows, with a particular focus on identity, access management, MFA, SSO, and data handling. • Support the security team on security questionnaires, RFPs, and customer due diligence requests. • Support the security team on broader initiatives such as AI governance, SaaS governance, and integration of acquired entities into the ISO scope.

• Develop and enhance vulnerability scanning strategies to ensure comprehensive coverage • Conduct internal and external vulnerability assessments and validate scan results • Apply established vulnerability management standards to classify vulnerabilities • Categorize and prioritize assets according to criticality • Partner with EBTS teams to develop and execute vulnerability remediation plans • Track and report remediation activities • Analyze emerging cyber threats and assess potential impacts • Communicate current risk exposure and remediation efforts to senior leadership • Develop, maintain, and present vulnerability management metrics and executive reports • Create, update, and maintain policies, standards, procedures related to vulnerability management • Ensure security controls are operating effectively to satisfy audit and regulatory requirements • Assist in the development of a threat hunting program • Collaborate with internal teams to investigate, validate, and resolve vulnerability findings