Detection Engineer, Falcon Complete (Remote)

CrowdStrike•USA FL Remote, FL

5d•$100,000 - $150,000•Remote

About The Position

The Falcon Complete Detection Engineering team builds and maintains the Next-Gen SIEM detection ruleset that powers CrowdStrike’s managed detection and response capability. The team develops high-fidelity detections driven by threat intelligence and real-world observations, responds rapidly to zero-days and emerging threats, and fills detection gaps across a broad range of third-party data sources. It also builds and refines AI-powered tooling to improve the speed and fidelity of detection development at scale. Engineers collaborate across the full pipeline—from ingestion and parsing to response and automation—to improve triage efficiency and accelerate threat disruption. The Detection Engineer conducts threat research and threat hunting, develops and deploys actionable SIEM detection rules, and helps ensure rules meet quality and performance expectations through testing and code review. The role uses CI/CD practices to deploy detections as code, contributes to AI-assisted detection engineering tools and workflows, collaborates on data parsing and normalization standards, and builds tools and processes that help managed services operate efficiently at scale. The role also participates in a Detection Engineer handler on-call rotation. This is a remote role. The position may require periodic alcohol and/or drug testing during employment.

Requirements

At least 3 years of experience as a detection engineer, security engineer, security analyst, threat intelligence analyst, or in a related field.
Knowledge of current cyber threats and how to detect them using SIEM and relevant technologies.
Experience analyzing large datasets across a variety of vendors and technologies.
Experience working with SIEM solutions such as LogScale, Splunk, Sumo Logic, Sentinel, QRadar, or LogRhythm.
A curious, self-motivated mindset and a high standard for one's own work.
Proven experience using AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes.

Nice To Haves

Relevant industry certifications, such as GCFA, GCDA, or GCIH.
Familiarity with large language models (LLMs) and AI coding agents; hands-on experience integrating or building LLM-assisted workflows is a plus.
Python or other scripting experience is strongly preferred.

Responsibilities

Perform threat research and threat hunting to identify emerging tactics, techniques, and procedures (TTPs), and build detections using an intelligence-driven approach.
Develop, test, and deploy actionable, high-fidelity CrowdStrike Next-Gen SIEM detection rules for the Managed Detection and Response team.
Conduct code reviews and testing to ensure rules meet quality and performance expectations before deployment at scale.
Use CI/CD best practices to deploy detections as code.
Contribute to and use an AI-powered detection engineering ecosystem, including LLM-assisted tooling and coding agents, to accelerate threat research, rule development, and workflow automation.
Collaborate with SIEM architects to develop best practices for parsing and normalizing data to a common event schema.
Build and maintain utilities and tools that enable the managed services team to operate efficiently at scale.
Develop and maintain processes and documentation.
Participate in a Detection Engineer handler on-call rotation.

Benefits

Market-leading compensation and equity awards.
Comprehensive physical and mental wellness programs.
Competitive vacation and holidays.
Paid parental and adoption leaves.
Professional development opportunities for all employees, regardless of level or role.
Employee Networks, geographic neighborhood groups, and volunteer opportunities.
Vibrant office culture with world-class amenities.
Health insurance, 401(k), paid time off, bonus eligibility, and equity grants.

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume