Remote Detection Engineer — AI-Driven SIEM & Threat Hunting

CrowdStrike; Cheyenne (WY); Remote; USD 100,000 - 150,000; Full time

Benefits offered by this job

Market-leading compensation

Wellness programs

Generous vacation and holidays

Parental and adoption leaves

Professional development

Employee networks

Job summary

CrowdStrike, Inc. is seeking a Detection Engineer to join the Falcon Complete Detection Engineering team. You will develop high-fidelity NG-SIEM detections, perform threat research, and drive automation across data parsing, rule deployment, and AI-assisted tooling.

The role involves collaborating with SIEM architects, maintaining scalable utilities, and contributing to a robust detection ecosystem. Remote options available; strong security mindset essential.

Qualifications

• 3+ years in detection/security engineering roles.
• Knowledge of threats and SIEM-based detections.
• Relevant certifications such as GCFA/GCDA/GCIH.
• Experience analyzing large datasets across vendors.
• Proficiency with SIEM platforms and scripting.

Responsibilities

• Perform threat research to identify emerging TTPs for detections.
• Develop, test, and deploy high-fidelity NG-SIEM detections.
• Conduct code reviews and ensure quality before deployment.
• Apply CI/CD to deploy detections as code.
• Leverage AI tooling and LLM-assisted workflows to speed development.
• Collaborate with SIEM architects on data parsing and normalization.
• Build tools to scale the managed services team.
• Develop and maintain processes and documentation.
• Participate in on-call rotation for detection engineering.

Skills

Threat research

Threat hunting

SIEM knowledge

Threat intelligence

Certifications GCFA/GCDA/GCIH

Data analysis

Python scripting

LLMs & AI tooling

Automation workflows

Curious mindset

Tools

LogScale

Splunk

SumoLogic

Sentinel

QRadar

LogRhythm

Job description

CrowdStrike, Inc. is seeking a Detection Engineer to join the Falcon Complete Detection Engineering team. You will develop high-fidelity NG-SIEM detections, perform threat research, and drive automation across data parsing, rule deployment, and AI-assisted tooling.

The role involves collaborating with SIEM architects, maintaining scalable utilities, and contributing to a robust detection ecosystem. Remote options available; strong security mindset essential.