Cybersecurity Engineer — Falcon SIEM & Detection Expert

Socket.dev; Austin (TX); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Competitive salary

ACS Equity Package

Health, Dental, Vision Insurance

Paid Time Off

Job summary

Allen Control Systems is seeking a Cybersecurity Engineer to build and operate our detection and security monitoring on the CrowdStrike Falcon platform. You will onboard new log sources, author and tune detection content, and manage day-to-day telemetry to maintain a defensible security posture.

The role requires a defender-at-heart mindset and the ability to turn ambiguous telemetry into actionable rules. The ideal candidate has hands-on experience with CrowdStrike Falcon Next-Gen SIEM, log

Qualifications

• 3–5+ years in security engineering, detection engineering, or SOC operations.
• Hands-on production experience implementing, configuring, and operating CrowdStrike Falcon Next-Gen SIEM.
• Proficiency with CQL for searches, correlation rules, and dashboards.
• Experience onboarding log sources and integrating third-party data pipelines.
• Ability to parse and normalize telemetry to ECS or CrowdStrike standards.
• Proven ability to tune detection rules and reduce false positives in production.

Responsibilities

• Operate CrowdStrike Falcon Next-Gen SIEM as the core detection platform.
• Develop and tune CQL searches, correlation rules, and dashboards.
• Onboard new log sources and data pipelines.
• Parse and normalize telemetry to ECS or CrowdStrike standards.
• Write, tune, and maintain production detection rules to balance coverage and noise.
• Collaborate with IT and engineering to close detection gaps.

Skills

Security engineering

Detection engineering

SOC operations

CQL proficiency

Log onboarding

Detection-rule authoring

Tools

CrowdStrike Falcon Next-Gen SIEM

CrowdStrike Parsing Standard

Job description

Allen Control Systems is seeking a Cybersecurity Engineer to build and operate our detection and security monitoring on the CrowdStrike Falcon platform. You will onboard new log sources, author and tune detection content, and manage day-to-day telemetry to maintain a defensible security posture.

The role requires a defender-at-heart mindset and the ability to turn ambiguous telemetry into actionable rules. The ideal candidate has hands-on experience with CrowdStrike Falcon Next-Gen SIEM, log