Security Engineer III - SIEM (Hybrid)

CrowdStrike•New York, NY

11d•$120,000 - $180,000•Hybrid

About The Position

The Get Data In (GDI) Integrations Content team at CrowdStrike Next-Gen SIEM builds out-of-the-box integrations for third-party products so their data can be ingested and parsed by the SIEM platform. The Security Engineer will design, develop, and maintain these data connectors to support seamless ingestion of security data from a range of third-party products. The role calls for hands-on cybersecurity experience, familiarity with data ingestion pipelines, log collection mechanisms, security event processing, and industry-standard integration methods. This is a hybrid role based at CrowdStrike’s NYC office. Candidates should be comfortable visiting the office twice a week once the development center is established. The position includes on-call support for critical ingestion issues and production incidents, and collaboration with customers and internal teams to troubleshoot and resolve data ingestion problems. The U.S. base salary range is $120,000–$180,000 per year. The position is also eligible for bonuses and equity grants and includes a comprehensive benefits package.

Requirements

Bachelor’s or Master’s degree in Computer Science or a related field, or equivalent work experience.
At least 6 years of experience in cybersecurity and SIEM integrations.
Experience developing data connectors or ingestion pipelines for SIEM platforms such as Splunk, Sentinel, Exabeam, or QRadar.
Experience with security data normalization schemas, parsing, and data enrichment.
Experience setting up and managing environments for security products such as firewalls, IDS/IPS, EDR, CASB, Identity Security, and Email Security.
Experience with security events and formats such as Syslog, CEF, LEEF, JSON, and XML.
Working knowledge of log processing or shipping tools such as Cribl, Splunk forwarder, Azure monitoring agent, or LogScale log collector.
Working knowledge of cloud-native logging services such as AWS CloudWatch, Azure Monitor, or GCP Logging.
Proficiency in at least one programming language, preferably Python or Go.
Strong documentation, communication, and customer interaction skills.
Proven experience using AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes.

Responsibilities

Evaluate, develop, maintain, and enhance data connectors and parsers for ingesting third-party security product data into CrowdStrike Next-Gen SIEM.
Set up and maintain lab or test environments for security products to validate data connectors and troubleshoot issues.
Troubleshoot and resolve issues with existing data connectors to ensure reliable log ingestion.
Collaborate with internal teams to define efficient logging, error handling, data normalization, and documentation for data connectors.
Research and implement best practices for ingesting security logs from firewalls, IDS/IPS, cloud security products, endpoint security, and other security products and platforms.
Write and maintain technical documentation for integration methods and troubleshooting guides.
Provide on-call support for critical data ingestion issues and production incidents.
Work with customers, customer success, and customer support teams to troubleshoot and resolve data ingestion-related issues and communicate effectively.

Benefits

Market-leading compensation and equity awards.
Comprehensive physical and mental wellness programs.
Competitive vacation and holidays.
Paid parental and adoption leaves.
Professional development opportunities for all employees regardless of level or role.
Employee Networks, geographic neighborhood groups, and volunteer opportunities.
Vibrant office culture with world-class amenities.
Eligibility for bonuses and equity grants.
Health insurance.
401(k).
Paid time off.