Remote Detection Engineer - AI-Powered SIEM

CrowdStrike Inc.; Madison (WI); Remote; USD 100,000 - 150,000; Full time

Benefits offered by this job

Market-leading compensation

Equity awards

Paid time off and holidays

Parental leave and adoption leave

Professional development

Employee networks and volunteering

Vibrant office culture (global)

Job summary

CrowdStrike is seeking a Detection Engineer to help build and maintain the NG-SIEM detections powering our managed detection and response. You will work across threat intelligence, data ingestion, and automation to deliver high-fidelity detections at scale.

The role involves threat research, writing detections, code reviews, and collaboration with SIEM architects. Experience with SIEM tools and AI/LLM-assisted workflows is highly valued; Python scripting is preferred.

Qualifications

• 3+ years as a detection engineer, security engineer, or related field.
• Experience with SIEM and threat detection across large datasets.
• Certifications such as GCFA/GCDA/GCIH are preferred.
• Ability to work with SIEM tools (LogScale, Splunk, SumoLogic, Sentinel, QRadar, LogRhythm).
• Familiarity with AI/LLM-powered tooling is a plus.
• Proficiency in Python or scripting languages.
• Strong curiosity and self-motivation; high quality standards.
• Experience applying AI technologies to improve workflows and decision making.

Responsibilities

• Perform threat research and hunting to identify emerging TTPs for detections.
• Develop, test, and deploy high fidelity NG-SIEM detection rules.
• Conduct code reviews and testing before deployment at scale.
• Use CI/CD practices to deploy detections as code.
• Leverage AI-powered tooling to accelerate research and rule development.
• Collaborate with SIEM architects on data parsing and normalization.
• Build and maintain utilities for large-scale managed services.
• Develop and maintain documentation and processes.
• Participate in on-call rotation for detections support.

Skills

Threat hunting

Threat research

SIEM and relevant technologies

LLMs & AI workflows

Python or scripting

Detections as code

Code reviews & testing

On-call rotation

Data parsing & normalization

Threat intelligence analysis

Education

GCFA/GCDA/GCIH certifications

Tools

LogScale

Splunk

SumoLogic

Sentinel

QRadar

LogRhythm

Job description

CrowdStrike is seeking a Detection Engineer to help build and maintain the NG-SIEM detections powering our managed detection and response. You will work across threat intelligence, data ingestion, and automation to deliver high-fidelity detections at scale.

The role involves threat research, writing detections, code reviews, and collaboration with SIEM architects. Experience with SIEM tools and AI/LLM-assisted workflows is highly valued; Python scripting is preferred.