Detection Engineer, Falcon Complete (Remote)

Overview

The Falcon Complete Detection Engineering (FCDE) team builds and maintains the NG-SIEM detection ruleset that powers CrowdStrike's managed detection and response capability, developing high-fidelity, intelligence-driven detections and AI-powered tooling.

What you'll do

• Perform threat research and threat hunting to identify emerging tactics, techniques, and procedures (TTPs) and build detections using an intelligence-driven approach.
• Develop, test, and deploy actionable, high-fidelity CrowdStrike Next-Gen SIEM detection rules to enable a world-class Managed Detection and Response team.
• Conduct code reviews and testing to ensure rules meet quality and performance expectations prior to deployment at scale.
• Leverage CI/CD best practices and principles to deploy detections as code.
• Contribute to and leverage an AI-powered detection engineering ecosystem, including LLM-assisted tooling and coding agents, to accelerate threat research, rule development, and detection workflow automation.
• Collaborate with SIEM architects to develop and define best practices for parsing and normalizing data to a common event schema.
• Build and maintain utilities and tools to enable the managed services team to operate efficiently and at scale.
• Develop and maintain processes and documentation.
• Participate in a Detection Engineer handler on-call rotation.

What you'll need

• 3+ years of experience as a detection engineer, security engineer, security analyst, threat intelligence analyst, or related field.
• Knowledge of current cyber threats and how to detect them using SIEM and relevant technologies.
• Relevant industry certifications (e.g., GCFA, GCDA, GCIH).
• Experience analyzing large datasets across a variety of vendors and technologies.
• Experience working with SIEM solutions (e.g., LogScale, Splunk, SumoLogic, Sentinel, QRadar, LogRhythm).
• A curious, self-motivated mindset with a high standard for your own work.
• Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.

Nice to have

• Familiarity with large language models (LLMs) and AI coding agents, with hands-on experience integrating or building LLM-assisted workflows.
• Python or other scripting experience.

Details

• Location: USA - Remote.
• Employment may require periodic alcohol and/or drug testing.
• Base salary range for U.S. candidates: $100,000 - $150,000 per year, with eligibility for bonuses, equity grants and a comprehensive benefits package.