Remote Detection Engineer — AI-Powered SIEM

CrowdStrike Inc.; Santa Fe (NM); Remote; USD 100,000 - 150,000; Full time

Benefits offered by this job

Market pay

Wellness programs

Vacation & holidays

Parental leave

Professional development

Employee networks

Office culture

Job summary

CrowdStrike Inc. is seeking a Detection Engineer to enhance NG-SIEM detections, leveraging threat intelligence and AI-powered tooling. You will develop high-fidelity rules, participate in code reviews, and deploy detections via CI/CD within CrowdStrike's FCDE team.

You’ll work with SIEM platforms, large datasets, and cutting-edge AI to accelerate threat research and detection workflow automation. This role emphasizes collaboration and on-call readiness across a global team.

Qualifications

• 3+ years of experience as a detection or security engineer, analyst, or related field.
• Experience with SIEM and related technologies to detect threats.
• Relevant certifications (GCFA, GCDA, GCIH, etc.).
• Experience analyzing large datasets across multiple vendors and technologies.

Responsibilities

• Perform threat research and threat hunting to identify emerging TTPs.
• Develop, test, and deploy high fidelity SIEM detection rules for the managed detection and response team.
• Conduct code reviews and testing to ensure rules meet quality and performance standards.
• Leverage CI/CD practices to deploy detections as code.
• Collaborate with SIEM architects to normalize data to a common event schema.
• Build and maintain utilities for the managed services team.

Skills

Threat research

Threat hunting

SIEM expertise

Python scripting

AI/LLM tooling

Education

GCFA

GCDA

GCIH

Tools

Splunk

QRadar

LogScale

SumoLogic

LogRhythm

Sentinel

Job description

CrowdStrike Inc. is seeking a Detection Engineer to enhance NG-SIEM detections, leveraging threat intelligence and AI-powered tooling. You will develop high-fidelity rules, participate in code reviews, and deploy detections via CI/CD within CrowdStrike's FCDE team.

You’ll work with SIEM platforms, large datasets, and cutting-edge AI to accelerate threat research and detection workflow automation. This role emphasizes collaboration and on-call readiness across a global team.