Detection Engineer, Falcon Complete (Remote)

Position Overview

• Location Type: Remote
• Job Type: Full Time
• Salary: Not specified

CrowdStrike is a global leader in cybersecurity, protecting organizations with its AI-native platform. The company’s mission is to stop breaches and provide security solutions for customers across all industries. They foster a culture of flexibility, autonomy, and a commitment to customers, community, and each other.

About the Role

The CrowdStrike Managed Services team offers opportunities to expand skills through various experiences building detection rules, tools, and infrastructure supporting Falcon Complete Next-Gen SIEM.

What You’ll Do

• Threat Research & Hunting: Perform threat research and threat hunting to identify emerging tactics, techniques, and procedures (TTPs) to build detection requirements.
• Detection Rule Development: Develop, test, and deploy actionable high-fidelity CrowdStrike Next-Gen SIEM detection rules.
• Code Review & Testing: Conduct code reviews and testing to ensure high quality and high-fidelity detection rules.
• CI/CD Implementation: Leverage CI/CD best practices and principles to deploy detection rule logic at scale.
• Collaboration with Analysts: Collaborate with Security Analysts to create playbooks for triage and response.
• SIEM Architecture Collaboration: Collaborate with SIEM architects to develop and define best practices for parsing data and normalizing data.
• Utility & Tool Development: Build and maintain utilities and tools to enable the managed services team to operate quickly and at a large scale.
• Process & Documentation: Develop and maintain processes and documentation.

What You’ll Need

• Experience: 3+ years of experience as a detection engineer, security engineer, security analyst, threat intelligence analyst, or related field.
• Threat Knowledge: Knowledge of current cyber threats and how to detect them using SIEM and relevant technologies.
• Certifications: Relevant industry certifications (e.g., GCFA, GCDA, GCIH, etc.).
• Data Analysis: Experience with analyzing large datasets across various vendors.
• SIEM Experience: Experience working with SIEM solutions.