Senior SIEM Integrations Engineer – Data Ingestion (Hybrid)

CrowdStrike Holdings, Inc.; New York (NY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Great Place to Work Certified

Professional development opportunities

Competitive vacation and holidays

Paid parental and adoption leaves

Job summary

CrowdStrike is seeking an Engineer III – SIEM Integrations (Hybrid) to design, develop, and maintain data connectors for our Next-Gen SIEM. You will ingest security data from various third-party products and ensure reliable log flow into CrowdStrike’s platform.

The ideal candidate has 6+ years in cybersecurity and SIEM integrations, with hands-on experience in data ingestion, parsing, and normalization across Firewalls, EDR, and cloud services.

Qualifications

• 6+ years of experience in cybersecurity and SIEM integrations.
• Experience developing data connectors or ingestion pipelines for SIEM platforms (e.g., Splunk, Sentinel, Exabeam, QRadar).
• Experience with security data normalization schemas, parsing and enrichment.
• Experience with security products such as Firewalls, IDS/IPS, EDR, CASB, Identity and Email Security.
• Familiarity with log formats like Syslog, CEF, LEEF, JSON, XML.

Responsibilities

• Evaluate, develop, maintain, and enhance data connectors and parsers for third-party products into CrowdStrike Next-Gen SIEM.
• Set up and maintain a lab/test environment to validate connectors and troubleshoot issues.
• Troubleshoot and resolve issues with data connectors to ensure reliable log ingestion.
• Collaborate with internal teams on logging, error handling, data normalization and documentation.
• Research and implement best practices for ingesting security logs across multiple products.

Skills

Python

Go

SIEM integrations

Data ingestion

Education

Bachelor's degree in CS or related

Tools

Cribl

Splunk Forwarder

Azure Monitor

LogScale

AWS CloudWatch

Job description

CrowdStrike is seeking an Engineer III – SIEM Integrations (Hybrid) to design, develop, and maintain data connectors for our Next-Gen SIEM. You will ingest security data from various third-party products and ensure reliable log flow into CrowdStrike’s platform.

The ideal candidate has 6+ years in cybersecurity and SIEM integrations, with hands-on experience in data ingestion, parsing, and normalization across Firewalls, EDR, and cloud services.