Remote Detection Engineer — AI-Driven SIEM & Threat Hunting

CrowdStrike Inc.; Lincoln (NE); A distancia; USD 100.000 - 150.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Market-leading compensation

Wellness programs

Generous vacation

Parental leaves

Professional development

Employee networks

Vibrant office culture

Great Place to Work Certification

Descripción de la vacante

CrowdStrike offers a remote role on the Falcon Complete Detection Engineering team. You will develop and maintain high-fidelity NG-SIEM detections driven by threat intel and real-world observations to power our managed detection and response capabilities.

Ideal candidates have 3+ years in detection/security, SIEM experience, and familiarity with AI tooling. You will work across ingestion to automation, collaborating with SIEM architects and participating in on-call rotations.

Formación

• 3+ years as a detection engineer, security engineer or related field.
• Knowledge of cyber threats and detection using SIEM and related technologies.
• Relevant certifications (GCFA, GCDA, GCIH, etc.).
• Experience with large datasets across vendors and SIEMs.
• Python or scripting experience preferred.
• Familiarity with AI technologies and LLM-assisted workflows is a plus.

Responsabilidades

• Perform threat research and hunting to identify emerging TTPs for detections.
• Develop, test, and deploy high-fidelity NG-SIEM detection rules.
• Conduct code reviews and testing before deployment at scale.
• Leverage CI/CD to deploy detections as code.
• Contribute to AI-powered detection tooling and LLM workflows.
• Collaborate with SIEM architects on data parsing and standardization.
• Build and maintain utilities for the managed services team.
• Maintain processes and documentation.
• Participate in on-call rotation.

Conocimientos

Threat research

Threat hunting

Python scripting

AI/LLM familiarity

Analytical mindset

Curiosity

Risk assessment

Herramientas

SIEM platforms

AI tooling

CI/CD tooling

Descripción del empleo

CrowdStrike offers a remote role on the Falcon Complete Detection Engineering team. You will develop and maintain high-fidelity NG-SIEM detections driven by threat intel and real-world observations to power our managed detection and response capabilities.

Ideal candidates have 3+ years in detection/security, SIEM experience, and familiarity with AI tooling. You will work across ingestion to automation, collaborating with SIEM architects and participating in on-call rotations.