Detection Engineer – AI-Driven SIEM (Remote)

CrowdStrike Inc.; Florida; Hybrid; USD 100,000 - 150,000; Full time

Benefits offered by this job

Market-leading compensation

Comprehensive wellness programs

Generous vacation and holidays

Parental and adoption leave

Professional development

Job summary

CrowdStrike Inc. is seeking a Detection Engineer for the FCDE team to build and maintain high-fidelity NG-SIEM detection rules and AI-powered tooling. You will work across ingestion, parsing, and response, driving faster threat disruption and better triage using intelligence-driven detections.

The role emphasizes threat research, CI/CD deployments, and collaboration with SIEM architects. Remote-friendly with comprehensive benefits and growth opportunities.

Qualifications

• 3+ years as a detection engineer, security engineer, or equivalent.
• Knowledge of cyber threats and SIEM-based detections.
• Certification in GCFA/GCDA/GCIH or similar is preferred.
• Experience analyzing large datasets across vendors and tech.

Responsibilities

• Perform threat research and hunting to identify TTPs for detections.
• Develop and deploy high-fidelity CrowdStrike SIEM detection rules.
• Conduct code reviews and testing prior to deployment at scale.
• Leverage CI/CD to deploy detections as code.
• Contribute to AI-powered tooling and LLM-assisted workflows.
• Collaborate with SIEM architects on data parsing and normalization.
• Build utilities to enable the managed services team at scale.
• Develop documentation and processes for the team.
• Participate in on-call rotation for detection engineering.

Skills

Threat research

Threat hunting

Detections engineering

CI/CD

Python scripting

AI/LLM workflows

Self-motivation

Cross-team collaboration

Education

GCFA/GCDA/GCIH certifications

Tools

LogScale

Splunk

Sumo Logic

Microsoft Sentinel

QRadar

LogRhythm

Job description

CrowdStrike Inc. is seeking a Detection Engineer for the FCDE team to build and maintain high-fidelity NG-SIEM detection rules and AI-powered tooling. You will work across ingestion, parsing, and response, driving faster threat disruption and better triage using intelligence-driven detections.

The role emphasizes threat research, CI/CD deployments, and collaboration with SIEM architects. Remote-friendly with comprehensive benefits and growth opportunities.