Remote Detection Engineer – AI-Powered SIEM & Threat Hunting

CrowdStrike Inc.; Phoenix (AZ); Remoto; USD 100.000 - 150.000; Tempo pieno

Vantaggi offerti da questo lavoro

Market-leading compensation and equity

Wellness programs

Generous vacation and holidays

Parental and adoption leave

Professional development

Employee networks

Vibrant office culture

Great Place to Work certification

Descrizione del lavoro

CrowdStrike, Inc. is seeking a Detection Engineer to join the FCDE team, focusing on NG-SIEM detections and AI-powered tooling. You will research threats, craft high-fidelity detections, and collaborate across engineers to improve threat disruption at scale.

The role involves CI/CD, on-call duties, and working with multiple SIEM platforms to normalize data and accelerate response. Remote-friendly US-based role with strong growth opportunities.

Competenze

• 3+ years as a detection/ security engineer or related field
• Experience with SIEM and relevant technologies
• Certifications in the field (GCFA/GCDA/GCIH)

Mansioni

• Perform threat research to identify TTPs and build detections
• Develop, test, and deploy high-fidelity CrowdStrike NG-SIEM detections
• Review code and test detections before deployment at scale
• Use CI/CD to deploy detections as code
• Leverage AI-powered tooling and LLM-assisted workflows
• Collaborate with SIEM architects on data parsing and normalization
• Build and maintain utilities for the managed services team
• Develop documentation and processes
• Participate in on-call rotation

Conoscenze

Threat research

Threat hunting

SIEM

Python scripting

AI/LLM tooling

Formazione

GCFA / GCDA / GCIH

Strumenti

LogScale

Splunk

Sumo Logic

Sentinel

QRadar

LogRhythm

Descrizione del lavoro

CrowdStrike, Inc. is seeking a Detection Engineer to join the FCDE team, focusing on NG-SIEM detections and AI-powered tooling. You will research threats, craft high-fidelity detections, and collaborate across engineers to improve threat disruption at scale.

The role involves CI/CD, on-call duties, and working with multiple SIEM platforms to normalize data and accelerate response. Remote-friendly US-based role with strong growth opportunities.