Remote Detection Engineer - AI-Driven SIEM & Threat Hunting

CrowdStrike Inc.; Denver (CO); Remote; USD 100,000 - 150,000; Full time

Benefits offered by this job

Competitive compensation

Wellness programs

Vacation & holidays

Parental leave

Development opportunities

Employee networks

Office culture

Great Place to Work

Job summary

CrowdStrike Inc. is seeking a Detection Engineer to build and refine high-fidelity NG-SIEM detections, leveraging threat intelligence and AI-powered tooling. You will work across ingestion, parsing, and automation to accelerate threat disruption and triage.

Ideal candidates have 3+ years in detections or security engineering, strong SIEM experience, and scripting skills. Remote-friendly role with on-call rotation and opportunities for professional growth.

Qualifications

• 3+ years as a detection/security engineer or similar
• Knowledge of cyber threats and how to detect with SIEM
• Certifications such as GCFA/GCDA/GCIH or equivalent
• Experience analyzing large datasets across vendors
• Experience with SIEM solutions (LogScale, Splunk, SumoLogic, Sentinel, QRadar, LogRhythm)
• Familiarity with LLMs and AI coding agents a plus
• Python or scripting experience preferred
• Curiosity and self-motivation with high standards
• Proven use of AI to improve workflows and outcomes

Responsibilities

• Perform threat research and hunting to identify TTPs for detections
• Develop, test and deploy high fidelity CrowdStrike NG-SIEM detections
• Conduct code reviews and testing before deployment at scale
• Leverage CI/CD to deploy detections as code
• Contribute to AI-powered detection tools and workflows
• Collaborate with SIEM architects on data parsing and normalization
• Build and maintain utilities for the managed services team
• Develop and maintain processes and documentation
• Support on-call rotation for the Detection Engineer role

Skills

Threat research

Threat hunting

Detection engineering

LLM tooling

Python

CI/CD

AI workflows

Curiosity

Tools

Splunk

LogScale

Sumo Logic

Sentinel

QRadar

LogRhythm

Job description

CrowdStrike Inc. is seeking a Detection Engineer to build and refine high-fidelity NG-SIEM detections, leveraging threat intelligence and AI-powered tooling. You will work across ingestion, parsing, and automation to accelerate threat disruption and triage.

Ideal candidates have 3+ years in detections or security engineering, strong SIEM experience, and scripting skills. Remote-friendly role with on-call rotation and opportunities for professional growth.