Detection Engineer - AI-Driven SIEM & Threat Hunting

CrowdStrike Inc.; Chicago (IL); Remote; USD 100,000 - 150,000; Full time

Benefits offered by this job

Health insurance

401k

Paid time off

Equity grants

Job summary

CrowdStrike Inc. is seeking a Detection Engineer to build and maintain the NG-SIEM detection ruleset for a world-class Managed Detection and Response team.

You’ll focus on high-fidelity detections driven by threat intelligence and real-world observations, enabling rapid disruption of threats. You will work across ingestion, parsing, and response pipelines, using AI-powered tooling and LLM-assisted workflows to accelerate research, rule development, and automation while collaborating with SIEM

Qualifications

• 3+ years in detection engineering, security engineering, or related field.
• Experience with SIEM and related technologies.

Responsibilities

• Develop and deploy high fidelity CrowdStrike NG-SIEM detection rules.
• Perform threat research to identify TTPs for detections.
• Conduct code reviews and testing before deployment at scale.
• Leverage CI/CD to deploy detections as code.
• Collaborate with SIEM architects on data parsing and normalization.
• Build utilities to enable the managed services team at scale.
• Document processes and participate in on-call rotation.

Skills

Threat research

Threat hunting

CI/CD

Python

AI tooling

Tools

SIEM solutions (LogScale)

Splunk

Sumo Logic

Sentinel

QRadar

LogRhythm

Job description

CrowdStrike Inc. is seeking a Detection Engineer to build and maintain the NG-SIEM detection ruleset for a world-class Managed Detection and Response team.

You’ll focus on high-fidelity detections driven by threat intelligence and real-world observations, enabling rapid disruption of threats. You will work across ingestion, parsing, and response pipelines, using AI-powered tooling and LLM-assisted workflows to accelerate research, rule development, and automation while collaborating with SIEM