Remote Detection Engineer – AI-Driven SIEM

CrowdStrike Inc.; Jackson (MS); A distancia; USD 100.000 - 150.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Market-leading compensation & equity

Wellness programs

Vacation & holidays

Parental leave

Professional development

Employee networks

Office culture

Great Place to Work certification

Descripción de la vacante

CrowdStrike, Inc. is seeking a Detection Engineer to join the FCDE team in a fully remote U.S. role.

You will perform threat research, build and refine high-fidelity SIEM detections, and collaborate across ingestion, parsing, and automation workflows to accelerate threat disruption. You will operate with CI/CD practices, contribute to AI-powered tooling, and work with SIEM architects to standardize data schemas.

Formación

• 3+ years in detection engineering or related security roles.
• Experience with SIEM platforms and threat detection.
• Proficient in Python scripting and data analysis.
• Familiar with AI tooling and LLM-enabled workflows.

Responsabilidades

• Perform threat research and hunting to identify new TTPs and detections.
• Develop, test, and deploy high-fidelity CrowdStrike SIEM rules.
• Conduct code reviews and performance testing before deployment.
• Leverage CI/CD to deploy detections as code.
• Collaborate on AI-enabled detection tooling and workflows.
• Define data parsing and normalization practices with SIEM architects.
• Build utilities to scale the managed services team.
• Document processes and participate in on-call rotations.

Conocimientos

Threat research

Threat hunting

Python scripting

AI tooling

SIEM knowledge

Analytical mindset

Educación

GCFA/GCDA/GCIH certifications

Herramientas

LogScale

Splunk

SumoLogic

Sentinel

QRadar

LogRhythm

Descripción del empleo

CrowdStrike, Inc. is seeking a Detection Engineer to join the FCDE team in a fully remote U.S. role.

You will perform threat research, build and refine high-fidelity SIEM detections, and collaborate across ingestion, parsing, and automation workflows to accelerate threat disruption. You will operate with CI/CD practices, contribute to AI-powered tooling, and work with SIEM architects to standardize data schemas.