Cybersecurity Engineer - Falcon SIEM & Detection Architect

Allen Control Systems; Austin (TX); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

ACS Equity Package

Health, Dental, Vision Insurance

Paid Time Off

Job summary

Allen Control Systems, an Austin-based defense technology company, seeks a Cybersecurity Engineer to build and operate our CrowdStrike FalconNGSIEM-based security telemetry. The role focuses on onboarding logs, writing detection content, and maturing a defensible security posture across rapid engineering teams.

The successful candidate will translate raw telemetry into reliable detections, work with IT and engineering to reduce gaps, and operate in a fast-moving, mission-critical environment on

Qualifications

• 3–5+ years in security engineering, detection engineering, or SOC operations.
• Hands-on production experience implementing, configuring, and operating CrowdStrike Falcon NGSIEM.
• CQL proficiency for searches, correlations, and dashboards.
• Proven log onboarding with connectors, data pipelines, and third‑party integrations.
• Parsing and normalization against ECS or CrowdStrike Parsing Standard.
• Detection rule authoring, tuning, and reducing false positives in production.
• Falcon platform fluency across EDR, identity, and cloud telemetry.

Responsibilities

• Implement, configure, and operate CrowdStrike Falcon NGSIEM as the core detection platform.
• Author, tune, and maintain CQL searches, correlation rules, and dashboards.
• Onboard new log sources and data pipelines from third parties.
• Parse and normalize telemetry against ECS or Parsing Standard.
• Write and tune detection rules to balance coverage and low noise.
• Collaborate with IT and engineering to close detection gaps.

Skills

Security engineering

Detection engineering

SOC operations

Tools

CrowdStrike Falcon NGSIEM

CQL

ECS / Parsing Standard

Git & CI/CD

SOAR (Falcon Fusion / XSOAR)

Job description

Allen Control Systems, an Austin-based defense technology company, seeks a Cybersecurity Engineer to build and operate our CrowdStrike FalconNGSIEM-based security telemetry. The role focuses on onboarding logs, writing detection content, and maturing a defensible security posture across rapid engineering teams.

The successful candidate will translate raw telemetry into reliable detections, work with IT and engineering to reduce gaps, and operate in a fast-moving, mission-critical environment on