Remote Detection Engineer — AI-Driven SIEM & Threat Hunting

CrowdStrike; Juneau (AK); Remote; USD 100,000 - 150,000; Full time

Benefits offered by this job

Compensation and equity awards

Wellness programs

Vacation and holidays

Parental and adoption leaves

Professional development opportunities

Employee networks and volunteering

Vibrant office culture

Great Place to Work Certified

Job summary

CrowdStrike is hiring for a Detection Engineer to join the FCDE team on a remote basis in the US. You will build and refine high-fidelity NG-SIEM detections, driven by threat intelligence and real-world observations, with AI-powered tooling to accelerate development.

You'll collaborate across ingestion, parsing, and automation pipelines, perform threat research, and contribute to a scalable detection ecosystem. A strong SIEM background and Python skills are desirable.

Qualifications

• 3+ years as a detection engineer or related security role.
• Experience with SIEM and threat intelligence for detections.
• Certifications GCFA/GCDA/GCIH or equivalent preferred.
• Experience handling large datasets across many vendors.

Responsibilities

• Perform threat research and hunting to identify emerging TTPs for detections.
• Develop and deploy high fidelity CrowdStrike Next-Gen SIEM detections.
• Conduct code reviews and testing before deployment at scale.
• Leverage CI/CD to deploy detections as code.
• Collaborate with SIEM architects on data parsing and normalization.
• Build utilities to scale managed services operations.
• Create and maintain documentation and processes.
• Participate in on-call rotation for detection engineering.

Skills

Threat research

Threat hunting

Python scripting

CI/CD

LLMs integration

Detection engineering

Code reviews

Tools

LogScale

Splunk

SumoLogic

Sentinel

QRadar

LogRhythm

Job description

CrowdStrike is hiring for a Detection Engineer to join the FCDE team on a remote basis in the US. You will build and refine high-fidelity NG-SIEM detections, driven by threat intelligence and real-world observations, with AI-powered tooling to accelerate development.

You'll collaborate across ingestion, parsing, and automation pipelines, perform threat research, and contribute to a scalable detection ecosystem. A strong SIEM background and Python skills are desirable.