- 5+ years
Detection & Response Engineer
Responsibilities
- Investigate security cases and targeted hunts using CrowdStrike Falcon Next-Gen SIEM and CQL; correlate telemetry, assess scope and impact, document findings, and recommend appropriate actions.
- Develop, test, deploy, tune, and maintain detection logic, queries, dashboards, analyst guides, and version-controlled detection content.
- Build and maintain Falcon Fusion SOAR workflows for enrichment, evidence capture, routing, escalation, and authorized response.
- Validate telemetry coverage and quality; troubleshoot parsing, normalization, mapping, and source-data issues.
- Translate validated investigations into platform workflow specifications and co-build scripts, API integrations, workflow components, and prototypes with Product and Engineering.
Requirements
- Nice to have: SOC runbooks
- Nice to have: FalconPy
- Nice to have: ServiceNow
- Nice to have: Jira