Detection Engineer, Falcon Complete (Remote, CAN)

CrowdStrike; Nova Scotia; Remote; CAD 110,000 - 180,000; Full time

Job summary

A leading technology company is seeking a Detection Engineer for its Falcon Complete team. This remote role involves developing detection rules and collaborating with internal teams to enhance cybersecurity measures. The ideal candidate will have significant experience in detection engineering and a strong understanding of current cyber threats.

Benefits

Remote-friendly and flexible culture

Competitive compensation and equity

Wellness programs and professional development

Generous vacation and parental leave

Vibrant office culture

Qualifications

• 3+ years in detection engineering, security analysis, or related fields.
• Experience analyzing large datasets across vendors.
• Ability to write code and use regular expressions.

Responsibilities

• Perform threat research and hunting to identify emerging TTPs.
• Develop and deploy high fidelity detection rules for SIEM.
• Collaborate with Security Analysts to create playbooks for triage.

Skills

Threat research

Detection techniques

Cybersecurity knowledge

Attention to detail

Communication skills

Education

Relevant certifications (e.g., GCFA, GCDA, GCIH)

Tools

SIEM solutions (LogScale, Splunk, SumoLogic, Sentinel, QRadar, LogRhythm)

Job description

Detection Engineer, Falcon Complete (Remote, CAN)

Join to apply for the Detection Engineer, Falcon Complete (Remote, CAN) role at CrowdStrike.

About the Role

The CrowdStrike Managed Services team offers opportunities to expand your skill set through building detection rules, tools, and infrastructure supporting Falcon Complete Next-Gen SIEM. As a Detection Engineer, you will collaborate with internal teams to create high fidelity detections based on CrowdStrike and third-party telemetry to enable Falcon Complete Next-Gen MDR. The ideal candidate demonstrates high technical competency and a focus on delivering value and success with Falcon Complete.

Responsibilities

1. Perform threat research and hunting to identify emerging TTPs and build detection requirements using an intelligence-driven approach.
2. Develop, test, and deploy high fidelity detection rules for Falcon Complete Next-Gen SIEM to support the MDR team.
3. Conduct code reviews and testing to ensure detection rule quality.
4. Leverage CI/CD practices to deploy detection logic at scale.
5. Collaborate with Security Analysts to create playbooks for triage and response.
6. Work with SIEM architects to develop best practices for data parsing and normalization.
7. Build tools and utilities to enable large-scale operations.
8. Maintain documentation and processes.

Minimum Requirements

• 3+ years in detection engineering, security analysis, or related fields.
• Knowledge of current cyber threats and detection techniques using SIEM technologies.
• Relevant certifications (e.g., GCFA, GCDA, GCIH).
• Experience analyzing large datasets across vendors.
• Proficiency with SIEM solutions (LogScale, Splunk, SumoLogic, Sentinel, QRadar, LogRhythm).
• Ability to write code and use regular expressions.
• Participation in detection handler rotations.
• Attention to detail and good communication skills.

Benefits

• Remote-friendly and flexible culture.
• Competitive compensation and equity.
• Wellness programs and professional development.
• Generous vacation, parental leave, and community engagement.
• Vibrant office culture and global recognition as a Great Place to Work.

CrowdStrike is an equal opportunity employer committed to diversity and inclusion. We support veterans and individuals with disabilities. For assistance, contact [e-mail]. The salary range for this role in Canada is $110,000 - $180,000 CAD, plus incentives, equity, and benefits. Salary is based on experience, skills, certifications, and location. All employees must have legal entitlement to work in Canada. Background checks are required.