Detection Engineer: AI-Driven SIEM & Threat Hunting

CrowdStrike Inc.; United States; Remote; USD 100,000 - 150,000; Full time

Benefits offered by this job

Compensation & equity

Wellness programs

Paid time off

Parental leave

Professional development

Employee networks

Office amenities

Great Place to Work

Job summary

CrowdStrike is seeking a Detection Engineer to build and maintain high-fidelity NG-SIEM detections for our FCDE team. You will drive threat research, write detections with intelligence-driven methods, and collaborate across a broad set of data sources to improve triage and response at scale.

You will contribute to AI-powered tooling, CI/CD deployment, and on-call rotations, with a focus on scalable detection development and operational excellence across global teams.

Qualifications

• 3+ years in a detection/ Security role
• Knowledge of cyber threats and detection using SIEM
• Certifications GCFA/GCDA/GCIH or equivalent preferred
• Experience analyzing large datasets across multiple vendors
• Experience with SIEM solutions (LogScale, Splunk, SumoLogic, Sentinel, QRadar, LogRhythm)
• Familiarity with LLMs and AI coding agents a plus
• Python or scripting experience strongly preferred
• Proven use of AI to improve workflows and decisions

Responsibilities

• Perform threat research and hunting to identify TTPs for detections
• Develop, test, deploy high-fidelity NG-SIEM detections for managed detection/response
• Conduct code reviews and tests to ensure quality before deployment
• Leverage CI/CD to deploy detections as code
• Contribute to and leverage AI-powered detection tooling and agents
• Collaborate with SIEM architects on data parsing and normalization
• Build and maintain utilities for the managed services team
• Develop and maintain documentation and processes
• Participate in a Detection Engineer on-call rotation

Skills

Threat research

Threat hunting

SIEM experience

Certifications GCFA/GCDA/GCIH

Data analysis

LLMs integration

Python scripting

AI tooling

Curious mindset

AI-driven decision making

Tools

LogScale

Splunk

SumoLogic

Sentinel

QRadar

LogRhythm

Job description

CrowdStrike is seeking a Detection Engineer to build and maintain high-fidelity NG-SIEM detections for our FCDE team. You will drive threat research, write detections with intelligence-driven methods, and collaborate across a broad set of data sources to improve triage and response at scale.

You will contribute to AI-powered tooling, CI/CD deployment, and on-call rotations, with a focus on scalable detection development and operational excellence across global teams.