Hybrid SIEM Data Ingestion Engineer

CrowdStrike; New York (NY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Market leader compensation & equity

Wellness programs

Generous vacation & holidays

Parental & adoption leaves

Professional development

Employee networks & volunteering

Vibrant office culture

Great Place to Work Certified

Job summary

CrowdStrike is seeking a Security Engineer to build data ingestion and integration for Next-Gen SIEM. You will design, develop, and maintain out-of-the-box data connectors to ingest security data from various third-party products into our SIEM platform.

The role emphasizes hands-on cybersecurity, data pipelines, and log processing, with a focus on scalable ingestion and strong documentation. This hybrid position is based in New York City, requiring occasional on-site visits and collaboration

Qualifications

• Bachelor’s or Master’s degree in Computer Science or related field or equivalent work experience.
• 6+ years of experience in cybersecurity and SIEM integrations
• Experience in developing data connectors or ingestion pipelines for SIEM platforms such as Splunk, Sentinel, Exabeam, QRadar etc.
• Experience in security data normalization schemas, parsing and data enrichment
• Experience in setting up and managing environments for security products such as Firewalls, IDS/IPS, EDR, CASB, Identity Security, Email Security etc.
• Experience with security events and its formats such as Syslog, CEF, LEEF, JSON, XML
• Working knowledge of log processing or shipping tools such as Cribl, Splunk forwarder, Azure monitoring agent, LogScale log collector etc.
• Working knowledge on cloud-native logging services such as AWS CloudWatch, Azure Monitor, or GCP Logging
• Proficiency in at least one programming language, preferably Python or Go
• Strong documentation, communication and customer interaction skills
• Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.

Responsibilities

• Evaluate, develop, maintain, and enhance data connectors and parsers to ingest data from third-party security products into CrowdStrike Next-Gen SIEM
• Set up and maintain a lab or test environment for security products to validate data connectors and troubleshoot issues
• Troubleshoot and resolve issues with existing data connectors to ensure reliable log ingestion
• Collaborate with internal teams to define efficient logging, error handling, data normalization and documentation for data connectors
• Research and implement best practices for ingesting security logs from Firewalls, IDS/IPS, Cloud Security products, Endpoint Security, and other security products and platforms
• Write and maintain high-quality technical documentation for integration methods and troubleshooting guides
• Provide on-call support for critical data ingestion issues and production incidents
• Work with customers, customer success and customer support teams to troubleshoot and resolve data ingestion-related issues and ensure effective communication

Skills

Cybersecurity SIEM

Data ingestion

Data normalization

Security product environments

Log formats

Log shipping tools

Cloud logging

Python/Go

Documentation & communication

AI in workflows

Education

Bachelor’s or Master’s in CS or related field

Tools

Cribl

Splunk Forwarder

Azure Monitoring Agent

LogScale

Job description

CrowdStrike is seeking a Security Engineer to build data ingestion and integration for Next-Gen SIEM. You will design, develop, and maintain out-of-the-box data connectors to ingest security data from various third-party products into our SIEM platform.

The role emphasizes hands-on cybersecurity, data pipelines, and log processing, with a focus on scalable ingestion and strong documentation. This hybrid position is based in New York City, requiring occasional on-site visits and collaboration