Cybersecurity Engineer

Socket.dev; Austin (TX); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Competitive salary

ACS Equity Package

Health, Dental, Vision Insurance

Paid Time Off

Job summary

Allen Control Systems is seeking a Cybersecurity Engineer to build and operate our detection and security monitoring on the CrowdStrike Falcon platform. You will onboard new log sources, author and tune detection content, and manage day-to-day telemetry to maintain a defensible security posture.

The role requires a defender-at-heart mindset and the ability to turn ambiguous telemetry into actionable rules. The ideal candidate has hands-on experience with CrowdStrike Falcon Next-Gen SIEM, log

Qualifications

• 3–5+ years in security engineering, detection engineering, or SOC operations.
• Hands-on production experience implementing, configuring, and operating CrowdStrike Falcon Next-Gen SIEM.
• Proficiency with CQL for searches, correlation rules, and dashboards.
• Experience onboarding log sources and integrating third-party data pipelines.
• Ability to parse and normalize telemetry to ECS or CrowdStrike standards.
• Proven ability to tune detection rules and reduce false positives in production.

Responsibilities

• Operate CrowdStrike Falcon Next-Gen SIEM as the core detection platform.
• Develop and tune CQL searches, correlation rules, and dashboards.
• Onboard new log sources and data pipelines.
• Parse and normalize telemetry to ECS or CrowdStrike standards.
• Write, tune, and maintain production detection rules to balance coverage and noise.
• Collaborate with IT and engineering to close detection gaps.

Skills

Security engineering

Detection engineering

SOC operations

CQL proficiency

Log onboarding

Detection-rule authoring

Tools

CrowdStrike Falcon Next-Gen SIEM

CrowdStrike Parsing Standard

Job description

Company OverviewACS (Allen Control Systems) is a defense technology company building precision robotic systems for the United States and its allies. Founded by two former U.S. Navy electrical engineers with deep experience in robotics and software, ACS brings together AI, computer vision, precision motion, and advanced hardware to solve complex defense challenges across land, air, and maritime environments.

Our flagship product, Bullfrog, is an autonomous precision weapon system that transforms existing weapons into highly accurate counter-drone systems — giving warfighters a scalable, cost-effective response to one of the fastest-growing threats on the modern battlefield. Bullfrog is deployed with U.S. forces, and ACS works with organizations throughout the U.S. military and national security community.

Following a $200 million Series B at a $2.2 billion valuation, ACS is rapidly expanding manufacturing, accelerating Bullfrog deployments, and developing the next generation of autonomous battlefield systems. This is an opportunity to join a proven, fast-moving team and help scale technology with direct, real-world impact on national security.

ACS is headquartered in Austin, Texas, with additional operations in Alexandria, Virginia; Mountain View, California; and Huntsville, Alabama. For more information, visit allencontrolsystems.com.

Position Overview:

We are seeking an experienced Cybersecurity Engineer to build and operate our detection and security monitoring capability on the CrowdStrike Falcon platform. This engineer will own the onboarding of new log sources, the authoring and tuning of detection content, and the day-to-day security telemetry that keeps a fast-moving defense engineering organization protected. Working closely with IT and engineering, this individual will translate raw log data into reliable, low-noise detections and help the company mature toward a defensible, compliance‑ready security posture. The ideal candidate is comfortable operating independently, thinks like both a defender and an attacker, and can turn ambiguous telemetry into actionable detection logic.

What You’ll Do:

• Implement, configure, and operate CrowdStrike Falcon Next-Gen SIEM as the organization’s core detection and monitoring platform.

• Author, tune, and maintain CQL searches, correlation rules, and dashboards to support detection and investigation.

• Onboard new log sources, including connectors, data pipelines, and third-party source integrations.

• Parse and normalize incoming telemetry against the CrowdStrike Parsing Standard or ECS.

• Write, tune, and maintain detection rules on production content, driving down false positives without sacrificing coverage.

• Operate across Falcon’s EDR, identity, and cloud telemetry to build a complete picture of the environment.

• Partner with IT and engineering to close detection gaps and improve the organization’s overall security posture.

What You’ll Need:

• Experience: 3-5+ years in security engineering, detection engineering, or SOC operations.

• Hands‑on production experience implementing, configuring, and operating CrowdStrike Falcon Next-Gen SIEM.

• CQL proficiency - searches, correlation rules, and dashboards.

• Demonstrated log onboarding - connectors, data pipelines, third‑party source integration.

• Parsing and normalization against the CrowdStrike Parsing Standard or ECS.

• Proven detection rule authoring, tuning, and false‑positive reduction on production content.

• Falcon platform fluency across EDR, identity, and cloud telemetry.

You’ll Stand Out:

• CrowdStrike certifications - CCSE, CCSA, CCFA, CCFH.

• Detection-as-code practice using Git and CI/CD.

• Falcon Fusion SOAR development, or Tines, Torq, XSOAR.

• Cloud security - AWS, Azure, GCP logging, CSPM, Kubernetes.

• Threat hunting or purple team background.

• Defense compliance - CMMC, NIST 800-171, FedRAMP.

What We Offer:

• Competitive salary

• ACS Equity Package

• Health, Dental, Vision Insurance

• Paid Time Off

Allen Control Systems is an Equal Opportunity Employer, providing equal employment opportunities to all employees and applicants for employment. Allen Control Systems prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.