Detection Engineer, Falcon Complete (Remote)

CrowdStrike develops cybersecurity products and services to prevent breaches. The Detection Engineer on the Falcon Complete Detection Engineering team researches threats, develops and maintains high-fidelity SIEM detections, and improves detection workflows and tooling for managed detection and response.

Responsibilities:

• Perform threat research and threat hunting to identify emerging tactics, techniques, and procedures (TTPs) to build detections using an intelligence driven approach
• Develop, test, and deploy actionable high fidelity CrowdStrike Next-Gen SIEM detection rules to enable a world class Managed Detection and Response team
• Conduct code reviews and testing to ensure rules meet our quality and performance expectations prior to deployment at scale
• Leverage CI/CD best practices and principles to deploy detections as code
• Contribute to and leverage an AI-powered detection engineering ecosystem, including LLM-assisted tooling and coding agents, to accelerate threat research, rule development, and detection workflow automation
• Collaborate with SIEM architects to develop and define best practices for parsing data and normalizing data to a common event schema
• Build and maintain utilities and tools to enable the managed services team to operate efficiently and at a large scale
• Develop and maintain processes and documentation
• Participate in a Detection Engineer handler on-call rotation

Requirements:

• 3+ years of experience as a detection engineer, security engineer, security analyst, threat intelligence analyst, or related field
• Knowledge of current cyber threats and how to detect them using SIEM and relevant technologies
• Relevant industry certifications (i.e. GCFA, GCDA, GCIH, etc.)
• Experience with analyzing large datasets across a variety of vendors and technologies
• Experience working with SIEM solutions (LogScale, Splunk, SumoLogic, Sentinel, QRadar, LogRhythm, etc)
• Familiarity with large language models (LLMs) and AI coding agents
• Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes
• hands-on experience integrating or building LLM-assisted workflows
• Python or other scripting experience
• A curious, self-motivated mindset with a high standard for your own work