Cloud Detection Engineer (Hybrid, ISR)

About the role

CrowdStrike's Falcon Cloud Security (FCS) Detection Engineering team helps customers of cloud computing manage their risk posture by writing and maintaining detection rules that assess cloud assets for risks and opportunities for improvement. The role combines security operations and incident response, data analytics, risk management, software development and threat research, in a fast-paced environment with collaboration across a diverse team.

Key responsibilities

• Research cloud threats, vulnerabilities and abuses to define configuration best practices for securing cloud services and assets
• Develop and deploy detection rules as code into the FCS product ecosystem
• Write customer-facing descriptions for alerts generated by the rules so users can understand and act on them
• Take part in team meetings and collaborate with US-based staff, with a working window that shifts between roughly 9:00am-6:00pm and 10:00am-7:00pm

Required profile

• Professional experience in cloud security operations and engineering, especially threat detection, incident response and risk management
• Experience with data analytics: searching large data sets, correlating attributes, interpreting results and drawing data-driven conclusions
• Working knowledge of at least one cloud provider: AWS, Azure, GCP or OCI
• Experience developing, deploying and maintaining code in CI/CD workflows, including BitBucket
• Familiarity with Agile project management and a DevOps or similar role using Python and Go
• Proven experience using AI to improve decision-making, workflows and efficiency
• Strong written and spoken English

Required skills

• Elastic Search and Splunk, or a SIEM
• Writing and running Elastic Search queries
• Bonus: Open Policy Agent (Rego) detection rules
• Bonus: detection engineering background and cloud certifications

What we offer

• Market-leading compensation and equity awards
• Wellness programs, paid vacation and holidays, and parental and adoption leave
• Professional development and employee networks