Detection Engineer: AI-Driven SIEM & Threat Hunting Remote

CrowdStrike Inc.; Tallahassee (FL); Remote; USD 100,000 - 150,000; Full time

Benefits offered by this job

Market leader compensation

Wellness programs

Paid time off and holidays

Professional development opportunities

Employee networks and volunteering

Job summary

CrowdStrike Inc. is seeking a Detection Engineer to develop and maintain high-fidelity NG-SIEM rules for CrowdStrike's managed detection and response service. You will work on threat research and AI-powered tooling to accelerate detections at scale.

Ideal candidates have 3+ years in a related field, strong SIEM experience, and familiarity with LLM-assisted workflows. This remote role offers flexibility and opportunities to impact threat detection globally.

Qualifications

• 3+ years of experience as a detection engineer, security engineer, security analyst, threat intelligence analyst, or related field.
• Knowledge of current cyber threats and how to detect them using SIEM and relevant technologies.
• Experience with analyzing large datasets across a variety of vendors and technologies.
• Familiarity with large language models (LLMs) and AI tooling is a plus.

Responsibilities

• Perform threat research and threat hunting to identify emerging TTPs to build detections.
• Develop, test, and deploy high fidelity CrowdStrike Next-Gen SIEM detection rules.
• Conduct code reviews and testing to ensure rules meet quality and performance standards.
• Leverage CI/CD to deploy detections as code.
• Collaborate with SIEM architects to define data parsing and normalization.
• Build and maintain utilities to operate at scale.
• Develop and maintain documentation.
• Participate in a Detection Engineer on-call rotation.

Skills

Threat research

SIEM experience

Python scripting

AI tooling

Threat intelligence

Education

GCFA

GCDA

GCIH

Tools

Splunk

LogScale

Sumo Logic

Sentinel

QRadar

LogRhythm

Job description

CrowdStrike Inc. is seeking a Detection Engineer to develop and maintain high-fidelity NG-SIEM rules for CrowdStrike's managed detection and response service. You will work on threat research and AI-powered tooling to accelerate detections at scale.

Ideal candidates have 3+ years in a related field, strong SIEM experience, and familiarity with LLM-assisted workflows. This remote role offers flexibility and opportunities to impact threat detection globally.