Remote SIEM Engineer — CrowdStrike LogScale Expert

Echelon Risk + Cyber; Washington (District of Columbia); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical/Dental/Vision insurance

401(k) with employer contribution

HSA/FSA funding

Flexible vacation policy

11 holidays

Family benefits

Certifications support

Job summary

Echelon Risk + Cyber is seeking an experienced SIEM Engineer to join our Managed Security Services team. The role focuses on CrowdStrike Falcon LogScale, log configuration, ingestion, parsing, and alerting. You will support MDR/EDR/SIEM operations and collaborate with client teams to craft effective security monitoring and incident response.

Strong CQL skills and Cribl familiarity are required. Authorized to work in the United States and ready to engage with diverse clients across industries.

Qualifications

• 4+ years of experience in SIEM engineering or similar security role.
• Hands-on experience with CrowdStrike Falcon LogScale and CQL.
• Degree in computer science, information security, or related field, or equivalent experience.

Responsibilities

• Implement SIEM solutions with CrowdStrike Falcon LogScale and LogScale ingestion, parser creation, dashboards, and tuning.
• Support SOC/EDR/SIEM operations to detect, investigate, and analyze events from CrowdStrike Falcon and other tools.
• Collaborate with client teams to design security monitoring strategies and improve incident response processes.
• Create and maintain security procedure documentation and detailed analysis reports.
• Develop Falcon LogScale queries to detect anomalies and threats.

Skills

SIEM engineering

Incident response

Threat hunting

LogScale/CQL

Attention to detail

Education

Bachelor's degree in CS/InfoSec

Tools

CrowdStrike Falcon LogScale

Cribl

CrowdStrike Query Language (CQL)

Job description

Echelon Risk + Cyber is seeking an experienced SIEM Engineer to join our Managed Security Services team. The role focuses on CrowdStrike Falcon LogScale, log configuration, ingestion, parsing, and alerting. You will support MDR/EDR/SIEM operations and collaborate with client teams to craft effective security monitoring and incident response.

Strong CQL skills and Cribl familiarity are required. Authorized to work in the United States and ready to engage with diverse clients across industries.