Cybersecurity Engineer

Allen Control Systems; Austin (TX); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

ACS Equity Package

Health, Dental, Vision Insurance

Paid Time Off

Job summary

Allen Control Systems, an Austin-based defense technology company, seeks a Cybersecurity Engineer to build and operate our CrowdStrike FalconNGSIEM-based security telemetry. The role focuses on onboarding logs, writing detection content, and maturing a defensible security posture across rapid engineering teams.

The successful candidate will translate raw telemetry into reliable detections, work with IT and engineering to reduce gaps, and operate in a fast-moving, mission-critical environment on

Qualifications

• 3–5+ years in security engineering, detection engineering, or SOC operations.
• Hands-on production experience implementing, configuring, and operating CrowdStrike Falcon NGSIEM.
• CQL proficiency for searches, correlations, and dashboards.
• Proven log onboarding with connectors, data pipelines, and third‑party integrations.
• Parsing and normalization against ECS or CrowdStrike Parsing Standard.
• Detection rule authoring, tuning, and reducing false positives in production.
• Falcon platform fluency across EDR, identity, and cloud telemetry.

Responsibilities

• Implement, configure, and operate CrowdStrike Falcon NGSIEM as the core detection platform.
• Author, tune, and maintain CQL searches, correlation rules, and dashboards.
• Onboard new log sources and data pipelines from third parties.
• Parse and normalize telemetry against ECS or Parsing Standard.
• Write and tune detection rules to balance coverage and low noise.
• Collaborate with IT and engineering to close detection gaps.

Skills

Security engineering

Detection engineering

SOC operations

Tools

CrowdStrike Falcon NGSIEM

CQL

ECS / Parsing Standard

Git & CI/CD

SOAR (Falcon Fusion / XSOAR)

Job description

Company Overview

ACS (Allen Control Systems) is a defense technology company building precision robotic systems for the United States and its allies. Founded by two former U.S. Navy electrical engineers with deep experience in robotics and software, ACS brings together AI, computer vision, precision motion, and advanced hardware to solve complex defense challenges across land, air, and maritime environments.

Our flagship product, Bullfrog, is an autonomous precision weapon system that transforms existing weapons into highly accurate counter-drone systems - giving warfighters a scalable, cost-effective response to one of the fastest-growing threats on the modern battlefield. Bullfrog is deployed with U.S. forces, and ACS works with organizations throughout the U.S. military and national security community.

Following a $200 million Series B at a $2.2 billion valuation, ACS is rapidly expanding manufacturing, accelerating Bullfrog deployments, and developing the next generation of autonomous battlefield systems. This is an opportunity to join a proven, fast-moving team and help scale technology with direct, real-world impact on national security.

ACS is headquartered in Austin, Texas, with additional operations in Alexandria, Virginia; Mountain View, California; and Huntsville, Alabama. For more information, visit allencontrolsystems.com.

Position Overview:

We are seeking an experienced Cybersecurity Engineer to build and operate our detection and security monitoring capability on the CrowdStrike Falcon platform. This engineer will own the onboarding of new log sources, the authoring and tuning of detection content, and the day-to-day security telemetry that keeps a fast-moving defense engineering organization protected. Working closely with IT and engineering, this individual will translate raw log data into reliable, low-noise detections and help the company mature toward a defensible, compliance-ready security posture. The ideal candidate is comfortable operating independently, thinks like both a defender and an attacker, and can turn ambiguous telemetry into actionable detection logic.

What You’ll Do:

• Implement, configure, and operate CrowdStrike Falcon Next-Gen SIEM as the organization’s core detection and monitoring platform.

• Author, tune, and maintain CQL searches, correlation rules, and dashboards to support detection and investigation.

• Onboard new log sources, including connectors, data pipelines, and third-party source integrations.

• Parse and normalize incoming telemetry against the CrowdStrike Parsing Standard or ECS.

• Write, tune, and maintain detection rules on production content, driving down false positives without sacrificing coverage.

• Operate across Falcon’s EDR, identity, and cloud telemetry to build a complete picture of the environment.

• Partner with IT and engineering to close detection gaps and improve the organization’s overall security posture.

What You’ll Need:

• Experience: 3-5+ years in security engineering, detection engineering, or SOC operations.

• Hands-on production experience implementing, configuring, and operating CrowdStrike Falcon Next-Gen SIEM.

• CQL proficiency - searches, correlation rules, and dashboards.

• Demonstrated log onboarding - connectors, data pipelines, third-party source integration.

• Parsing and normalization against the CrowdStrike Parsing Standard or ECS.

• Proven detection rule authoring, tuning, and false-positive reduction on production content.

• Falcon platform fluency across EDR, identity, and cloud telemetry.

You’ll Stand Out:

• CrowdStrike certifications - CCSE, CCSA, CCFA, CCFH.

• Detection-as-code practice using Git and CI/CD.

• Falcon Fusion SOAR development, or Tines, Torq, XSOAR.

• Cloud security - AWS, Azure, GCP logging, CSPM, Kubernetes.

• Threat hunting or purple team background.

• Defense compliance - CMMC, NIST 800-171, FedRAMP.

What We Offer:

• Competitive salary

• ACS Equity Package

• Health, Dental, Vision Insurance

• Paid Time Off

Allen Control Systems is an Equal Opportunity Employer, providing equal employment opportunities to all employees and applicants for employment. Allen Control Systems prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.