Remote Detection Engineer: AI‑Powered SIEM

CrowdStrike; Dover (DE); A distancia; USD 100.000 - 150.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Competitive compensation

Wellness programs

Vacation and holidays

Parental leave

Professional development

Employee networks

Descripción de la vacante

CrowdStrike Inc. is seeking a Detection Engineer to join the Falcon Complete Detection Engineering team. You will build and maintain NG-SIEM detection rules powering our managed detection and response capabilities, using threat intelligence and real-world observations.

You will work across ingestion, parsing, and automation, collaborating with SIEM architects and AI-powered tooling to accelerate detection development and threat disruption at scale. Remote-friendly, full-time.

Formación

• 3+ years in detection/security engineering or related field.
• Knowledge of current cyber threats and detection using SIEM.
• Relevant industry certifications (GCFA/GCDA/GCIH).
• Experience analyzing large datasets across vendors/technologies.
• Experience with SIEM solutions (LogScale, Splunk, SumoLogic, Sentinel, QRadar, LogRhythm).
• Familiarity with LLMs and AI coding agents; hands-on experience preferred.
• Python or scripting experience strongly preferred.

Responsabilidades

• Perform threat research and threat hunting to identify emerging TTPs to build detections using an intelligence driven approach.
• Develop, test, and deploy high fidelity CrowdStrike Next-Gen SIEM detection rules to enable a world class MDR team.
• Conduct code reviews and testing to ensure rules meet quality and performance expectations before deployment at scale.
• Leverage CI/CD best practices to deploy detections as code.
• Contribute to AI-powered detection engineering ecosystem with LLM-assisted tooling and workflows.
• Collaborate with SIEM architects to define parsing and normalizing data to a common event schema.
• Build and maintain utilities to enable the managed services team to operate efficiently at scale.
• Develop and maintain processes and documentation.
• Participate in a Detection Engineer on-call rotation.

Conocimientos

Threat research

Threat hunting

SIEM expertise

Python scripting

AI/LLM tooling

Educación

GCFA

GCDA

GCIH

Herramientas

LogScale

Splunk

Sumo Logic

Sentinel

QRadar

LogRhythm

Descripción del empleo

CrowdStrike Inc. is seeking a Detection Engineer to join the Falcon Complete Detection Engineering team. You will build and maintain NG-SIEM detection rules powering our managed detection and response capabilities, using threat intelligence and real-world observations.

You will work across ingestion, parsing, and automation, collaborating with SIEM architects and AI-powered tooling to accelerate detection development and threat disruption at scale. Remote-friendly, full-time.