Security Data Ingestion Engineer III - Hybrid SIEM

CrowdStrike, Inc.; New York (NY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Market-leading compensation and equity

Comprehensive wellness programs

Professional development opportunities

Job summary

CrowdStrike, Inc. is seeking a Security Engineer to design, develop, and maintain data connectors for CrowdStrike Next-Gen SIEM. You will ingest data from third‑party security products, validate integrations, and ensure reliable log delivery across environments.

The role requires hands‑on cybersecurity experience, data ingestion pipelines, and proficiency in Python or Go. This is a hybrid role with on‑site work at our NYC office two days per week.

Qualifications

• Bachelor’s or Master’s degree in Computer Science or related field or equivalent work experience.
• 6+ years of experience in cybersecurity and SIEM integrations.
• Experience in developing data connectors or ingestion pipelines for SIEM platforms.
• Experience in security data normalization schemas, parsing and data enrichment.
• Experience setting up and managing environments for security products like Firewalls, IDS/IPS, EDR, CASB, Identity Security and more.
• Experience with log formats such as Syslog, CEF, LEEF, JSON, XML.
• Proficiency in at least one programming language, preferably Python or Go.

Responsibilities

• Evaluate, develop, maintain, and enhance data connectors and parsers to ingest data from third-party security products into CrowdStrike Next-Gen SIEM.
• Set up and maintain a lab or test environment for security products to validate data connectors and troubleshoot issues.
• Troubleshoot and resolve issues with existing data connectors to ensure reliable log ingestion.
• Collaborate with internal teams to define logging, error handling, data normalization and documentation for data connectors.
• Research and implement best practices for ingesting security logs from Firewalls, IDS/IPS, Cloud Security products, Endpoint Security, etc.
• Write and maintain high-quality technical documentation for integration methods and troubleshooting guides.
• Provide on-call support for critical data ingestion issues and production incidents.
• Work with customers and CS teams to troubleshoot ingestion-related issues and ensure clear communication.

Skills

Cybersecurity

SIEM integrations

Data ingestion

Data connectors

Python

Go

Cloud logging

Documentation

Education

Bachelor’s or Master’s degree in Computer Science or related field

Tools

Cribl

Splunk forwarder

Azure Monitor

LogScale

AWS CloudWatch

GCP Logging

Job description

CrowdStrike, Inc. is seeking a Security Engineer to design, develop, and maintain data connectors for CrowdStrike Next-Gen SIEM. You will ingest data from third‑party security products, validate integrations, and ensure reliable log delivery across environments.

The role requires hands‑on cybersecurity experience, data ingestion pipelines, and proficiency in Python or Go. This is a hybrid role with on‑site work at our NYC office two days per week.