Remote Detection Engineer – AI-Driven SIEM & Threat Hunting

CrowdStrike; Hartford (CT); Remote; USD 100,000 - 150,000; Full time

Benefits offered by this job

Market-leading compensation

Wellness programs

Vacation and holidays

Parental leave

Professional development opportunities

Employee Networks and volunteer机会

Job summary

CrowdStrike Inc. is seeking a Detection Engineer to join the FCDE team. You will research threats, hunt for emerging TTPs, and develop high-fidelity NG-SIEM detections powering our managed detection and response platform.

Work with AI tooling and LLM-assisted workflows, collaborate with SIEM architects, and deploy detections as code using CI/CD. Strong analytical mindset and experience with SIEMs are essential. This remote U.S.

Qualifications

• 3+ years in detection engineering, security engineering, or related roles.
• Knowledge of current cyber threats and how to detect them using SIEM.
• Security certifications (e.g., GCFA/GCDA/GCIH) preferred.
• Experience analyzing large datasets across multiple vendors and technologies.
• Experience with SIEM solutions (LogScale, Splunk, Sumo Logic, Sentinel, QRadar, LogRhythm).

Responsibilities

• Perform threat research and hunting to identify emerging TTPs for detections.
• Develop, test, and deploy high-fidelity CrowdStrike Next-Gen SIEM detection rules.
• Review code and test rules before deployment at scale.
• Leverage CI/CD to deploy detections as code.
• Contribute to AI-powered detection tooling and workflows for faster research.
• Collaborate with SIEM architects on data parsing and normalization.
• Build and maintain utilities to support the managed services team.
• Develop and maintain documentation and processes.
• Participate in a Detection Engineer on-call rotation.

Skills

Threat research

Threat hunting

Detections engineering

Python scripting

AI tooling / LLM workflows

Education

Security certifications (GCFA/GCDA/GCIH)

Tools

LogScale

Splunk

SumoLogic

Sentinel

QRadar

LogRhythm

Job description

CrowdStrike Inc. is seeking a Detection Engineer to join the FCDE team. You will research threats, hunt for emerging TTPs, and develop high-fidelity NG-SIEM detections powering our managed detection and response platform.

Work with AI tooling and LLM-assisted workflows, collaborate with SIEM architects, and deploy detections as code using CI/CD. Strong analytical mindset and experience with SIEMs are essential. This remote U.S.