Remote Detection Engineer — AI-Driven SIEM & Threat Hunting

CrowdStrike Inc.; Salt Lake City (UT); Remote; USD 100,000 - 150,000; Full time

Benefits offered by this job

Competitive compensation

Wellness programs

Vacation and holidays

Parental leave

Professional development

Employee networks

Office amenities

Great Place to Work Certified

Job summary

CrowdStrike Inc. is seeking a Detection Engineer to perform threat research and hunting, develop next-gen SIEM detections, and collaborate on scalable, AI-assisted tooling. You will contribute to an AI-first detection engineering ecosystem and support a world-class Managed Detection and Response team.

Responsibilities include deploying detections as code, reviewing rules, and maintaining documentation. A strong background in SIEM, threat intel, and Python is essential.

Qualifications

• 3+ years of experience as a detection engineer or related security field.
• Experience using SIEM to detect threats and anomalies.
• Relevant industry certifications (GCFA, GCDA, GCIH).
• Experience with large datasets across vendors and technologies.
• Familiarity with LLMs and AI coding agents is a plus.
• Proficiency in Python or scripting languages.

Responsibilities

• Perform threat research and threat hunting to identify TTPs and build detections.
• Develop, test, and deploy high fidelity SIEM detection rules for MDR.
• Conduct code reviews and testing to ensure quality before deployment at scale.
• Leverage CI/CD to deploy detections as code.
• Collaborate with SIEM architects on data parsing and normalization standards.
• Build tools to enable the managed services team to operate efficiently at scale.
• Develop and maintain processes and documentation.
• Participate in on-call rotation for detection engineering.

Skills

Threat research

Threat hunting

SIEM

Python scripting

AI/LLM workflows

Code reviews

automation

Education

GCFA

GCDA

GCIH

Tools

LogScale

Splunk

SumoLogic

Sentinel

QRadar

LogRhythm

Job description

CrowdStrike Inc. is seeking a Detection Engineer to perform threat research and hunting, develop next-gen SIEM detections, and collaborate on scalable, AI-assisted tooling. You will contribute to an AI-first detection engineering ecosystem and support a world-class Managed Detection and Response team.

Responsibilities include deploying detections as code, reviewing rules, and maintaining documentation. A strong background in SIEM, threat intel, and Python is essential.