Detection Engineer

Job Summary

To enhance managed detection and response capabilities, the full-time remote Detection Engineer will perform threat research, develop high-fidelity detection rules, and collaborate on automation and tooling within the Falcon Complete Detection Engineering team.

Key responsibilities:

• Conduct threat research and hunting to identify tactics, techniques, and procedures (TTPs) for detection rule development
• Develop, test, and deploy actionable high-fidelity detection rules for CrowdStrike's SIEM solutions
• Collaborate with SIEM architects to define best practices for data parsing and normalization

Required qualifications:

• 3+ years of experience in detection engineering, security analysis, or related fields
• Knowledge of current cyber threats and detection methodologies using SIEM technologies
• Relevant industry certifications (e.g., GCFA, GCDA, GCIH)
• Experience with analyzing large datasets and working with various SIEM solutions
• Proficiency in Python or other scripting languages is strongly preferred