AI-Powered Detection Engineer - Remote SIEM & MDR

CrowdStrike Inc.; Oregon; Hybrid; USD 100,000 - 150,000; Full time

Benefits offered by this job

Equity awards

Wellness programs

Generous vacation & holidays

Parental & adoption leaves

Professional development

Job summary

CrowdStrike is seeking a Detection Engineer for the FCDE team to build and maintain high-fidelity NG-SIEM detections driven by threat intel and real-world observations. You will contribute to AI-powered tooling and rapid response to emerging threats, enabling a leading managed detection and response capability.

You’ll work on threat research, rule development, and collaboration with SIEM architects to normalize data and accelerate detection workflow automation.

Qualifications

• 3+ years in detection, security engineering, or related role.
• Experience detecting threats with SIEM across multiple vendors.
• Hands-on Python or scripting for detections.
• Familiarity with LLMs and AI-assisted workflows is a plus.
• Knowledge of current cyber threats and detection techniques.
• Certifications GCFA/GCDA/GCIH preferred.
• Ability to analyze large datasets and derive insights.

Responsibilities

• Perform threat research and threat hunting to identify TTPs to build detections.
• Develop, test, and deploy high fidelity SIEM detections for MDR teams.
• Conduct code reviews and testing prior to deployment at scale.
• Leverage CI/CD to deploy detections as code.
• Contribute to AI-powered tooling and LLM-assisted workflows.
• Collaborate with SIEM architects on data parsing and normalization.
• Build and maintain utilities for the managed services team.
• Develop and maintain processes and documentation.
• Participate in a Detection Engineer on-call rotation.

Skills

Threat research

SIEM expertise

Python scripting

AI/LLM knowledge

Data analysis

Security engineering

Curious mindset

Threat intelligence

Education

GCFA/GCDA/GCIH

Bachelors in CS or related

Tools

LogScale

Splunk

SumoLogic

Sentinel

QRadar

LogRhythm

Job description

CrowdStrike is seeking a Detection Engineer for the FCDE team to build and maintain high-fidelity NG-SIEM detections driven by threat intel and real-world observations. You will contribute to AI-powered tooling and rapid response to emerging threats, enabling a leading managed detection and response capability.

You’ll work on threat research, rule development, and collaboration with SIEM architects to normalize data and accelerate detection workflow automation.