Senior Security Automation & Detection Engineer

CrowdStrike Inc.; Hobart; On-site; AUD 130,000 - 190,000; Full time

Benefits offered by this job

Market-leading compensation

Wellness programs

Generous vacation

Parental and adoption leave

Professional development

Employee networks

Office culture

Great Place to Work Certified

Job summary

CrowdStrike Inc. is seeking a Sr. Security Engineer II within the Threat Intelligence and Detection Engineering (TIDE) team to design and build automation, tooling, and platforms that strengthen CrowdStrike's internal security operations.

You'll partner with Incident Response Operations to develop scalable solutions, automate workflows, and implement detections and integrations across cloud and on‑prem environments, leveraging CI/CD and IaC practices to improve resilience and speed.

Qualifications

• Hands-on experience investigating and responding to cybersecurity incidents in a SOC, CSIRT, or Incident Response team.
• Experience developing software using Python, Go, or another modern programming language.
• Experience building automation, APIs, or systems integrations.
• Experience working with cloud platforms such as AWS, Azure, or Google Cloud.
• Understanding of Linux, networking, authentication, and enterprise security technologies.
• Strong analytical, troubleshooting, and communication skills.
• Experience building CI/CD pipelines using GitLab CI, GitHub Actions, Jenkins, or similar platforms.
• Experience with Docker, Kubernetes, Terraform, or other Infrastructure as Code technologies.
• Experience with SIEM, EDR, SOAR, identity, or cloud security platforms.
• Experience with security telemetry, log analytics, or detection engineering.
• Familiarity with MITRE ATT&CK, threat hunting methodologies, or threat intelligence.
• Experience applying AI or machine learning to improve security operations and engineering workflows.
• Proven experience utilizing AI technologies to enhance decision‑making, streamline workflows and processes, improve efficiency and drive business outcomes.

Responsibilities

• Partner with Incident Response Operations to identify operational challenges and engineer scalable solutions.
• Automate repetitive investigative and response workflows to reduce manual effort and accelerate incident handling.
• Design solutions that improve investigative efficiency, enrich security data, and simplify analyst workflows.
• Build capabilities that improve visibility, reduce operational overhead, and enable responders to focus on high-value investigations.
• Design, implement, and maintain security detections across a variety of technologies and data sources.
• Improve detection fidelity by reducing false positives and increasing actionable alert quality.
• Develop and maintain detection, enrichment, and response pipelines that support scalable security operations.
• Collaborate with Threat Intelligence to operationalize threat intelligence through detections and automation.
• Develop automation, integrations, and internal tooling that improve security operations.
• Build and maintain integrations between security platforms, cloud services, and internal systems.
• Engineer reliable, cloud-native capabilities using CI/CD pipelines, Infrastructure as Code, and modern software engineering practices.
• Contribute to engineering standards, documentation, and continuous improvement initiatives.

Skills

Incident response

Python/Go

APIs & integrations

Cloud platforms (AWS/Azure/GCP)

Linux

Networking

CI/CD pipelines

Docker & Kubernetes

SIEM/EDR/SOAR

Threat intelligence

AI in security

Machine learning in security

Tools

Terraform

GitHub Actions

GitLab CI

Job description

CrowdStrike Inc. is seeking a Sr. Security Engineer II within the Threat Intelligence and Detection Engineering (TIDE) team to design and build automation, tooling, and platforms that strengthen CrowdStrike's internal security operations.

You'll partner with Incident Response Operations to develop scalable solutions, automate workflows, and implement detections and integrations across cloud and on‑prem environments, leveraging CI/CD and IaC practices to improve resilience and speed.