Remote Detection Engineer - AI-Powered SIEM

CrowdStrike Inc.; Lansing (MI); Remote; USD 100,000 - 150,000; Full time

Benefits offered by this job

Market-leading compensation

Equity awards

Wellness programs

Generous vacation

Parental leave

Professional development

Employee networks

Vibrant culture

Job summary

CrowdStrike is seeking a Detection Engineer to join the FCDE team. You will develop high-fidelity NG-SIEM detections, perform threat hunting, and contribute to AI-assisted tooling. You’ll work with a diverse tech stack and drive rapid, scalable detection improvements across our MDR platform.

The role emphasizes threat research, CI/CD deployments, and collaboration with SIEM architects. Remote-friendly, with on-call duties and ongoing learning opportunities.

Qualifications

• 3+ years of experience as a detection engineer or similar security role.
• Knowledge of current cyber threats and detection with SIEM tech.
• Relevant industry certifications such as GCFA/GCDA/GCIH.

Responsibilities

• Perform threat research to identify emerging TTPs for detections.
• Develop and deploy high-fidelity SIEM detection rules for MDR.
• Conduct code reviews and testing before deployment at scale.
• Leverage CI/CD to deploy detections as code.
• Contribute to AI-powered detection engineering tooling and workflows.
• Collaborate with SIEM architects on data parsing and normalization.
• Build and maintain utilities for the managed services team.
• Develop processes and documentation.
• Participate in on-call rotation.

Skills

Threat research

Threat hunting

Detection engineering

CI/CD

Python

AI tooling

LLM workflows

Team collaboration

Threat intelligence

Education

GCFA

GCDA

GCIH

Tools

LogScale

Splunk

Sumo Logic

Sentinel

QRadar

LogRhythm

Job description

CrowdStrike is seeking a Detection Engineer to join the FCDE team. You will develop high-fidelity NG-SIEM detections, perform threat hunting, and contribute to AI-assisted tooling. You’ll work with a diverse tech stack and drive rapid, scalable detection improvements across our MDR platform.

The role emphasizes threat research, CI/CD deployments, and collaboration with SIEM architects. Remote-friendly, with on-call duties and ongoing learning opportunities.