Remote Detection Engineer - AI-Driven SIEM & Threat Hunting

CrowdStrike; Richmond (VA); Remote; USD 100,000 - 150,000; Full time

Benefits offered by this job

Market compensation leadership

Wellness programs

Vacation & holidays

Parental leave

Professional development

Employee networks

Vibrant office culture

Great Place to Work

Job summary

CrowdStrike Inc. is seeking a Detection Engineer to build and maintain the NG-SIEM detections powering our managed detection and response. You will work across threat research, rule development, and automation to improve detection fidelity at scale.

Your work will involve collaborating with SIEM architects, leveraging AI-assisted workflows, and contributing to an AI-powered detection engineering ecosystem. Remote-friendly, with a strong emphasis on security excellence.

Qualifications

• 3+ years as a detection/security engineer, analyst, or related field
• Experience with SIEMs and threat detection
• Certifications such as GCFA/GCDA/GCIH are a plus
• Experience analyzing large datasets across vendors and technologies

Responsibilities

• Perform threat research and threat hunting to identify emerging TTPs
• Develop, test, and deploy high fidelity CrowdStrike SIEM detections
• Conduct code reviews and testing before deployment at scale
• Leverage CI/CD to deploy detections as code
• Collaborate with SIEM architects on data parsing and normalization

Skills

Threat research

Threat hunting

SIEM expertise

Python scripting

LLM workflows

Zero-day response

Education

Industry certifications (GCFA, GCDA, GCIH)

Tools

Splunk

QRadar

LogRhythm

LogScale

SumoLogic

Sentinel

Job description

CrowdStrike Inc. is seeking a Detection Engineer to build and maintain the NG-SIEM detections powering our managed detection and response. You will work across threat research, rule development, and automation to improve detection fidelity at scale.

Your work will involve collaborating with SIEM architects, leveraging AI-assisted workflows, and contributing to an AI-powered detection engineering ecosystem. Remote-friendly, with a strong emphasis on security excellence.