Remote Detection Engineer: AI-Driven SIEM & Threat Hunting

CrowdStrike Inc.; Olympia (WA); Remote; USD 100,000 - 150,000; Full time

Benefits offered by this job

Market-leading compensation and equity

Wellness programs

Generous vacation and holidays

Parental and adoption leaves

Professional development

Employee networks

Vibrant office culture

Great Place to Work Certification

Job summary

CrowdStrike is seeking a Detection Engineer to join the Falcon Complete Detection Engineering team. You will build and maintain high-fidelity NG-SIEM detections driven by threat intel, collaborating across ingestion, parsing, and automation to accelerate response.

You will perform threat research, develop detections, review code, and contribute to AI-powered tooling while working with a suite of SIEM platforms. This role supports scalable, secure threat disruption across customers.

Qualifications

• 3+ years as a detection/security engineer or similar role.
• Experience detecting threats with SIEMs and related techs.
• Industry certifications such as GCFA/GCDA/GCIH are preferred.

Responsibilities

• Perform threat research to identify new TTPs for detections.
• Develop, test, and deploy high fidelity NG-SIEM rules.
• Conduct code reviews to ensure quality and performance before deployment.
• Leverage CI/CD practices to deploy detections as code.
• Contribute to AI-powered detection tooling and workflows.
• Collaborate with SIEM architects to normalize event data.
• Build utilities to support the managed services team at scale.
• Develop documentation and processes.
• Participate in on-call rotation for detections support.

Skills

Threat hunting

SIEM expertise

AI/LLM workflows

Python

Detections as code

Threat intelligence

Diverse SIEM platforms

On-call experience

Data analysis

Education

Industry certifications (GCFA, GCDA, GCIH)

Tools

LogScale

Splunk

SumoLogic

Sentinel

QRadar

LogRhythm

Job description

CrowdStrike is seeking a Detection Engineer to join the Falcon Complete Detection Engineering team. You will build and maintain high-fidelity NG-SIEM detections driven by threat intel, collaborating across ingestion, parsing, and automation to accelerate response.

You will perform threat research, develop detections, review code, and contribute to AI-powered tooling while working with a suite of SIEM platforms. This role supports scalable, secure threat disruption across customers.