Detection Engineer - AI-Driven SIEM (Remote)

CrowdStrike Inc.; United States; A distancia; USD 140.000 - 210.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Market-leading compensation

Wellness programs

Generous vacation/holidays

Parental and adoption leave

Professional development

Employee networks

Vibrant office culture

Great Place to Work Certified

Descripción de la vacante

CrowdStrike is seeking a Detection Engineer to join the FCDE team, building high-fidelity NG-SIEM detections and AI-powered tooling. You will work across ingestion, parsing, and automation to improve threat disruption and triage efficiency.

Ideal candidates have 3+ years in detection/SEC roles, strong SIEM experience (LogScale, Splunk, Sentinel), and familiarity with LLM-assisted workflows. Remote-friendly with global opportunities and strong growth potential.

Formación

• 3+ years as a detection engineer, security engineer, security analyst, threat intel analyst, or related field.
• Knowledge of current cyber threats and how to detect them using SIEM and related tech.
• Industry certifications such as GCFA/GCDA/GCIH highly desirable.
• Experience analyzing large datasets across multiple vendors and technologies.
• Experience with SIEM solutions (e.g., LogScale, Splunk, Sumo Logic, Sentinel, QRadar, LogRhythm).
• Familiarity with LLMs and AI coding agents; hands-on integration a plus.
• Python or scripting experience strongly preferred.

Responsabilidades

• Perform threat research and threat hunting to identify emerging TTPs for detections.
• Develop, test, and deploy high-fidelity CrowdStrike NG-SIEM detection rules.
• Conduct code reviews and testing to ensure quality before deployment at scale.
• Leverage CI/CD practices to deploy detections as code.
• Contribute to AI-powered detection tooling and workflows.
• Collaborate with SIEM architects to define data parsing and normalization standards.
• Build and maintain utilities to support the managed services team.
• Develop and maintain processes and documentation.
• Participate in a Detection Engineer on-call rotation.

Conocimientos

Threat research

Threat hunting

SIEM experience

Python scripting

AI/LLMs

On-call reliability

Threat intelligence

Educación

GCFA, GCDA, GCIH certifications

Herramientas

LogScale

Splunk

Sumo Logic

Microsoft Sentinel

IBM QRadar

LogRhythm

Descripción del empleo

CrowdStrike is seeking a Detection Engineer to join the FCDE team, building high-fidelity NG-SIEM detections and AI-powered tooling. You will work across ingestion, parsing, and automation to improve threat disruption and triage efficiency.

Ideal candidates have 3+ years in detection/SEC roles, strong SIEM experience (LogScale, Splunk, Sentinel), and familiarity with LLM-assisted workflows. Remote-friendly with global opportunities and strong growth potential.