Security Engineer III - SIEM (Hybrid)
CrowdStrike1 day ago
Base Salary
$120k - $180k/yr
Responsibilities
- Evaluate, develop, maintain, and enhance data connectors and parsers for ingesting third-party security product data into CrowdStrike Next-Gen SIEM.
- Set up and manage lab or test environments for security products to validate connectors and troubleshoot issues.
- Troubleshoot existing connectors and resolve data-ingestion issues and production incidents, including on-call support.
- Define logging, error handling, data normalization, and documentation practices with internal teams.
- Research and implement methods for ingesting security logs from firewalls, IDS/IPS, cloud security, endpoint security, and other security products.
- Write technical documentation and troubleshooting guides for integration methods.
- Collaborate with customers, customer success, and customer support to resolve data-ingestion issues.
Requirements
- Bachelor’s or master’s degree in computer science or a related field, or equivalent work experience.
- 6+ years of experience in cybersecurity and SIEM integrations.
- Experience developing data connectors or ingestion pipelines for SIEM platforms such as Splunk, Sentinel, Exabeam, or QRadar.
- Experience with security data normalization schemas, parsing, and data enrichment.
- Experience setting up and managing environments for firewalls, IDS/IPS, EDR, CASB, identity security, and email security products.
- Experience with Syslog, CEF, LEEF, JSON, and XML security event formats.
- Working knowledge of Cribl, Splunk Forwarder, Azure Monitoring Agent, or LogScale Log Collector.
- Working knowledge of AWS CloudWatch, Azure Monitor, or GCP Logging.
- Proficiency in at least one programming language, preferably Python or Go.
- Strong documentation, communication, and customer-interaction skills.
- Proven experience using AI technologies to improve decision-making, workflows, efficiency, and business outcomes.
Benefits
- Base salary range of $120,000–$180,000 per year, with eligibility for bonuses, equity grants, health insurance, 401k, and paid time off.
- Comprehensive physical and mental wellness programs, competitive vacation and holidays, and paid parental and adoption leave.
- Professional development opportunities, employee networks, neighborhood groups, and volunteer opportunities.
- Vibrant office culture with world-class amenities and a Great Place to Work Certified environment.
- Hybrid work arrangement requiring on-site attendance at the NYC office twice per week once the development center is established.
About CrowdStrike
CrowdStrike builds the Falcon cloud-native security platform used by enterprises and governments to protect endpoints, cloud workloads, identities, and data with EDR, next-generation antivirus, threat intelligence, and managed threat hunting. Founded in 2011 and publicly traded on NASDAQ as CRWD, the company sells primarily by subscription and also provides incident response services; its systems ingest and analyze nearly 3 trillion security events per day across customer environments.