Remote Detection Engineer – AI-Driven NG-SIEM

CrowdStrike; Montpelier (VT); Remote; USD 100,000 - 150,000; Full time

Benefits offered by this job

Equity awards

Wellness programs

Paid time off

Parental leave

Professional development

Employee networks

Job summary

CrowdStrike is seeking a Detection Engineer to help build and maintain the NG-SIEM detections powering our managed detection and response platform. You will perform threat research, craft high-fidelity rules, and deploy them across a scalable environment.

Collaborating with SIEM architects, you will leverage AI-assisted tooling and CI/CD practices to accelerate threat research, rule development, and automation. A strong focus on quality and incident readiness is essential.

Qualifications

• 3+ years in detection engineering or security operations.
• Knowledge of current cyber threats and how to detect them using SIEM and relevant technologies.
• Relevant industry certifications (GCFA/GCDA/GCIH) or equivalent.

Responsibilities

• Perform threat research and threat hunting to identify emerging TTPs and build detections.
• Develop, test, and deploy high-fidelity CrowdStrike NG-SIEM detections for MDR.
• Conduct code reviews and testing to ensure quality before deployment at scale.
• Leverage CI/CD practices to deploy detections as code.
• Contribute to ai-powered detection tooling and workflows to accelerate development.
• Collaborate with SIEM architects on data parsing and normalization standards.
• Build and maintain utilities to scale the managed services team.
• Develop and maintain processes and documentation.
• Participate in a Detection Engineer on-call rotation.

Skills

Threat hunting

Threat research

SIEM

Python scripting

LLMs

CI/CD

Code reviews

On-call

AI tooling

Education

GCFA

GCDA

GCIH

Tools

Splunk

LogScale

SumoLogic

QRadar

LogRhythm

Job description

CrowdStrike is seeking a Detection Engineer to help build and maintain the NG-SIEM detections powering our managed detection and response platform. You will perform threat research, craft high-fidelity rules, and deploy them across a scalable environment.

Collaborating with SIEM architects, you will leverage AI-assisted tooling and CI/CD practices to accelerate threat research, rule development, and automation. A strong focus on quality and incident readiness is essential.