Sr. SRE II - Agentic SOC, NG-SIEM (Hybrid)

CrowdStrike; Austin (TX); On-site; USD 130,000 - 160,000; Full time

Benefits offered by this job

Market-leading compensation and equity awards

Comprehensive wellness programs

Professional development opportunities

Job summary

CrowdStrike is seeking a Senior Engineer II for their NG-SIEM platform, focusing on reliability and scalability in cybersecurity. The role requires a passion for reliability engineering and significant experience in software engineering or platform engineering.

Candidates need expertise in systems programming languages and deep experience with observability practices, along with the ability to work collaboratively across teams. This is a hybrid role based in Austin, TX, with a vibrant office culture and market-leading benefits.

Qualifications

• 10+ years in software engineering or platform engineering with large-scale systems.
• Deep experience building monitoring pipelines and defining SLIs/SLOs.
• Hands-on experience with streaming platforms and infrastructure-as-code.

Responsibilities

• Design and maintain monitoring and synthetic test suites for the NG-SIEM pipeline.
• Engineer scaling solutions to prevent bottlenecks across components.
• Serve as a subject matter expert during platform-wide incidents.

Skills

Reliability engineering

Software engineering

Scripting (Python, Bash)

Systems programming (Go, Java, Rust, or C++)

End-to-end observability

Cross-team collaboration

Tools

Kafka

CI/CD

Job description

Overview

As a global leader in cybersecurity, CrowdStrike protects people, processes and technologies that drive modern organizations. Since 2011, our mission has been to stop breaches and redefine modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems and process trillions of events daily. We are a mission-driven company that values flexibility, autonomy and a culture of innovation and strong customer focus.

About The Role

Our mission is to make all security-relevant data continuously available for automated detection and response, threat hunting, and other Falcon platform use cases. The NG-SIEM (next-generation security information and event management) data and processing systems ingest a very large volume of events daily, retain data for years, and support dozens of millions of queries per hour across many customers. As a Senior Engineer II on the NG-SIEM EPICS team, you will own the reliability and scalability of the security industry’s largest SIEM platform, approaching challenges as software engineering problems rather than purely operational ones.

The NG-SIEM platform comprises many decoupled components interacting across complex pipelines. You will build observability, automation, and scaling systems that keep the entire platform healthy — across ingest, search and workflow execution. You will join a distributed team of high-ownership technical leaders who share a passion for stopping breaches.

This is a hybrid role with the expectation to be in our Austin, TX office 2–3 days per week.

What You'll Do

• End-to-end observability: Design, build, and maintain monitoring and synthetic test suites that provide deep visibility into the health of the NG-SIEM pipeline from ingest through search and workflow execution.
• Coordinated scaling: Engineer orchestrated scaling solutions that treat the NG-SIEM pipeline as a unified system, provisioning resources across dependent components to prevent bottlenecks.
• Incident response engineering: Serve as a subject matter expert during platform-wide incidents (P2 and above), diagnose and resolve multi-component failures, and participate in on-call rotations.
• Capacity planning and cost management: Develop models for end-to-end capacity forecasting and toolings to surface cost drivers across the platform.
• Automation and runbooks: Convert manual procedures into automated remediation workflows, including scaling responses and infrastructure healing, to resolve issues before customers are affected.
• Cross-team collaboration: Partner with cell-level teams and stakeholders to triage SLO breaches, drive problem management for reliability efforts, and communicate during incidents.
• Platform improvements: Identify and drive systemic improvements for long-term resilience and efficiency of NG-SIEM.

What You'll Need

• U.S. citizen or Permanent Resident and able to work solely from the U.S.
• A passion for reliability engineering and curiosity about how large-scale systems behave under pressure
• 10+ years in software engineering, site reliability engineering, or platform engineering with significant experience in large-scale distributed systems
• Strong proficiency in at least one systems programming language (Go, Java, Rust, or C++) and one scripting language (Python, Bash)
• Deep experience with end-to-end observability: building monitoring pipelines, defining SLIs/SLOs, and creating actionable dashboards
• Demonstrated ability to diagnose and resolve complex incidents spanning multiple distributed components
• Experience with capacity planning and scaling for large infrastructure footprints
• Hands-on experience with streaming platforms (e.g., Kafka) and understanding of back pressure, partition management, and consumer group dynamics
• Familiarity with infrastructure-as-code, CI/CD, and automated deployment practices
• A can-do attitude and strong collaborative skills
• Excellent written and verbal communication for incident management and post-incident analyses
• Willingness to work across time zones with globally distributed teams

Bonus Points

• Experience in reliability or platform engineering at a hyperscaler (AWS, Azure, GCP) or large-scale SaaS provider
• Track record of automated remediation and self-healing infrastructure
• Experience with cost modeling and unit economics for large compute/storage footprints
• Familiarity with cloud-native architectures and serverless computing
• Experience operating platforms processing over 1 trillion events per day or >10 PB of data per day
• Exposure to log management, cybersecurity products, or security operations workflows
• Disaster recovery planning and execution for multi-region systems

Benefits and Compliance

• Market-leading compensation and equity awards
• Comprehensive physical and mental wellness programs
• Competitive vacation and holidays
• Paid parental and adoption leave
• Professional development opportunities for all employees
• Employee networks and volunteer opportunities
• Vibrant office culture with amenities
• Great Place to Work Certified

CrowdStrike is an equal opportunity employer. We are committed to fostering a culture of belonging and provide accommodations upon request. We participate in E-Verify where required and comply with applicable equal employment opportunity laws. If you need assistance submitting an application, please contact [e-mail].