Remote Detection Engineer — AI-Driven Threat Hunting

CrowdStrike Inc.; Carson City (NV); Remote; USD 100,000 - 150,000; Full time

Benefits offered by this job

Wellness programs

Paid time off

Parental leave

Professional development

Equity awards

Job summary

CrowdStrike, Inc. is seeking a Detection Engineer to advance threat research, hunting, and detection engineering for a global security platform. You will develop high-fidelity SIEM rules, review code, and deploy detections with modern CI/CD practices while collaborating with SIEM architects.

The role emphasizes AI-enabled workflows and scalable tooling. Ideal candidates bring 3+ years in security engineering, SIEM expertise across multiple platforms, and hands-on experience with LLM-assisted

Qualifications

• 3+ years of experience as a detection engineer, security engineer, security analyst, threat intelligence analyst, or related field.
• Knowledge of current cyber threats and how to detect them using SIEM and relevant technologies.
• Experience with analyzing large datasets across a variety of vendors and technologies.
• Experience working with SIEM solutions (LogScale, Splunk, SumoLogic, Sentinel, QRadar, LogRhythm, etc).
• Familiarity with large language models (LLMs) and AI coding agents, with hands-on experience integrating or building LLM-assisted workflows a plus.
• Python or other scripting experience strongly preferred.

Responsibilities

• Perform threat research and threat hunting to identify emerging tactics, techniques, and procedures (TTPs) to build detections using an intelligence driven approach.
• Develop, test, and deploy actionable high fidelity CrowdStrike Next-Gen SIEM detection rules to enable a world class Managed Detection and Response team.
• Conduct code reviews and testing to ensure rules meet our quality and performance expectations prior to deployment at scale.
• Leverage CI/CD best practices and principles to deploy detections as code.
• Collaborate with SIEM architects to develop and define best practices for parsing data and normalizing data to a common event schema.
• Build and maintain utilities and tools to enable the managed services team to operate efficiently and at a large scale.
• Develop and maintain processes and documentation.
• Participate in a Detection Engineer handler on-call rotation.

Skills

Threat research

Threat hunting

Python scripting

AI-assisted workflows

Self-motivated mindset

Education

GCFA/GCDA/GCIH certifications

Tools

LogScale

Splunk

SumoLogic

Sentinel

QRadar

LogRhythm

Job description

CrowdStrike, Inc. is seeking a Detection Engineer to advance threat research, hunting, and detection engineering for a global security platform. You will develop high-fidelity SIEM rules, review code, and deploy detections with modern CI/CD practices while collaborating with SIEM architects.

The role emphasizes AI-enabled workflows and scalable tooling. Ideal candidates bring 3+ years in security engineering, SIEM expertise across multiple platforms, and hands-on experience with LLM-assisted