Detection Engineer - AI-Driven NG-SIEM & Threat Hunting

CrowdStrike Inc.; United States; Remote; USD 100,000 - 150,000; Full time

Benefits offered by this job

Market-leading compensation

Wellness programs

Generous vacation and holidays

Parental and adoption leaves

Professional development opportunities

Employee networks and community events

World class office amenities

Job summary

CrowdStrike Inc. is seeking a Detection Engineer to research threats, hunt adversaries, and develop high‑fidelity NG‑SIEM detections for our Managed Detection and Response team. You will review code, deploy detections as code, and collaborate with SIEM architects to standardize data handling at scale.

The role emphasizes CI/CD, AI-assisted tooling, and on‑call duties, with opportunities to leverage large language models and advanced analytics to accelerate threat disruption.

Qualifications

• 3+ years of experience as a detection engineer, security engineer, security analyst, threat intelligence analyst, or related field.
• Knowledge of current cyber threats and how to detect them using SIEM and relevant technologies.
• Experience with analyzing large datasets across a variety of vendors and technologies.
• Experience working with SIEM solutions (LogScale, Splunk, SumoLogic, Sentinel, QRadar, LogRhythm, etc).
• Familiarity with large language models (LLMs) and AI coding agents, with hands-on experience integrating or building LLM-assisted workflows a plus.
• Python or other scripting experience strongly preferred.

Responsibilities

• Perform threat research and threat hunting to identify emerging TTPs to build detections using an intelligence driven approach.
• Develop, test, and deploy high-fidelity the company Next-Gen SIEM detection rules to enable a world class Managed Detection and Response team.
• Conduct code reviews and testing to ensure rules meet quality and performance expectations prior to deployment at scale.
• Leverage CI/CD best practices to deploy detections as code.
• Collaborate with SIEM architects to develop and define best practices for parsing data and normalizing data to a common event schema.
• Build and maintain utilities and tools to enable the managed services team to operate efficiently and at a large scale.
• Develop and maintain processes and documentation.
• Participate in a Detection Engineer handler on-call rotation.

Skills

Threat research

Threat hunting

Python scripting

AI/LLM workflows

Detections engineering

CI/CD

Education

GCFA

GCDA

GCIH

Tools

LogScale

Splunk

SumoLogic

Sentinel

QRadar

LogRhythm

Job description

CrowdStrike Inc. is seeking a Detection Engineer to research threats, hunt adversaries, and develop high‑fidelity NG‑SIEM detections for our Managed Detection and Response team. You will review code, deploy detections as code, and collaborate with SIEM architects to standardize data handling at scale.

The role emphasizes CI/CD, AI-assisted tooling, and on‑call duties, with opportunities to leverage large language models and advanced analytics to accelerate threat disruption.