Automation Engineer II, Falcon Complete (Remote)
CrowdStrike23 hours ago
Remote, United States or Indianapolis, IN, USAMid Level
H1B sponsor
Base Salary
$100k - $145k/yr
Responsibilities
- Build and maintain SOAR security automation workflows and playbooks for investigation, triage, and response.
- Develop PowerShell and Python scripts for security enrichment, remediation, API integration, and basic forensic functions.
- Integrate SIEM queries into automated workflows and manipulate security data using JSON and regular expressions.
- Assist with implementing AI workflow concepts and AI-powered automation under guidance.
- Collaborate with SOC analysts and engineering teams to identify automation opportunities and improve analyst efficiency.
- Maintain automation scripts and workflows using Git platforms and evaluate emerging SOAR, automation, and AI technologies for MDR operations.
Requirements
- At least 2 years of experience in automation, scripting, or cybersecurity, with relevant security experience considered.
- Proficiency with PowerShell for security investigation and response tasks.
- Working knowledge of Python for automation and API integration.
- Basic understanding of SIEM query languages, security analytics, and incident detection and response workflows in SOC or MDR environments.
- Experience with JSON, regular expressions, and version control systems such as Git, GitHub, GitLab, or Bitbucket.
- Experience using AI technologies to enhance decision-making, workflows, efficiency, and business outcomes.
- Preferred qualifications include Falcon SOAR or LogScale experience, AI workflow frameworks, LLM integration, NIST or MITRE ATT&CK familiarity, cloud platform experience, SOC experience, CrowdStrike Falcon APIs, generative AI, or prompt engineering.
- BA or BS, or MA or MS, in a relevant field such as computer science, computer engineering, mathematics, information security, intelligence studies, or cybersecurity; relevant work experience or training may substitute.
Benefits
- Remote position.
- Market-leading compensation and equity awards, plus bonuses and a comprehensive benefits package.
- Comprehensive physical and mental wellness programs, health insurance, 401k, vacation, and holidays.
- Paid parental and adoption leave.
- Professional development opportunities for all employees.
- Employee networks, geographic neighborhood groups, volunteer opportunities, and office amenities.
About CrowdStrike
CrowdStrike builds the Falcon cloud-native security platform used by enterprises and governments to protect endpoints, cloud workloads, identities, and data with EDR, next-generation antivirus, threat intelligence, and managed threat hunting. Founded in 2011 and publicly traded on NASDAQ as CRWD, the company sells primarily by subscription and also provides incident response services; its systems ingest and analyze nearly 3 trillion security events per day across customer environments.