Senior/ Staff Security Engineer, Detection and Response
Grow Therapy- Full Time
- Senior (5 to 8 years)
Candidates should possess at least 10 years of cybersecurity, information security, threat research, threat intelligence, or other relevant experience, with a minimum of 5 years in detection engineering, incident response, or threat hunting. They should have experience leading information or cyber security teams such as threat intelligence, detection engineering, or blue/purple/red teams, and a comprehensive understanding of security methodologies, technologies, and best practices. Furthermore, candidates should be able to grasp abstract problems and reason about solutions to solve them, along with expertise in building and managing detection operations in endpoint (e.g., EDR, XDR) and cloud (e.g., AWS, Azure, GCP) environments.
As the Director of AI/ML Detection Engineering Operations, you will lead and grow a global team of detection engineers focused on threat identification across endpoints, cloud infrastructure, and hybrid workloads. You will own the end-to-end lifecycle of detection engineering operations—from threat intelligence integration to rule deployment, tuning, and validation. Additionally, you will analyze security data, threat intelligence, and other information to detect gaps or improvement opportunities in CrowdStrike’s detection capabilities and readiness against adversaries, collaborate with leaders to prioritize detection gaps, align on coverage strategy, and integrate detection outputs into investigation and response workflows, and establish and track KPIs for detection efficacy, fidelity, coverage, and operational efficiency.
Cloud-native endpoint security solutions provider
CrowdStrike specializes in cybersecurity, focusing on protecting businesses from cyber threats through cloud-native endpoint security solutions. Their main product, the Falcon platform, includes services like Falcon Pro, which replaces traditional antivirus with next-generation antivirus that integrates threat intelligence, Falcon Insight for endpoint detection and response, and Falcon Device Control to manage connected devices. Unlike many competitors, CrowdStrike's services are subscription-based, allowing clients to choose different levels of protection based on their needs. The company serves a diverse clientele, including many Fortune 100 companies, and is recognized as a leader in the cybersecurity field, known for its effectiveness in threat detection and response.