Automation Engineer II, Falcon Complete (Remote)
CrowdStrike23 hours ago
Remote, United StatesMid Level
H1B sponsor
Base Salary
$100k - $145k/yr
Responsibilities
- Build and maintain SOAR automation workflows and playbooks for investigation, triage, and response.
- Develop PowerShell and Python scripts for security enrichment, remediation, forensic functions, and API integration.
- Integrate SIEM queries and apply JSON and regular-expression parsing to support security investigations.
- Assist with implementing AI-powered workflows and evaluate emerging SOAR, automation, and AI technologies.
- Collaborate with SOC analysts and engineering teams to identify high-value automation opportunities and improve operational efficiency.
- Maintain automation scripts and workflows using Git platforms.
Requirements
- At least 2 years of experience in automation, scripting, or cybersecurity; relevant security experience is considered.
- Proficiency with PowerShell and working knowledge of Python for automation and API integration.
- Basic understanding of SIEM query languages, security analytics, incident detection, and response workflows in SOC/MDR environments.
- Familiarity with JSON, regular expressions, and version-control systems such as Git, GitHub, GitLab, or Bitbucket.
- Proven experience using AI technologies to improve decision-making, workflows, efficiency, or business outcomes.
- BA or BS / MA or MS in a relevant field such as computer science, computer engineering, mathematics, information security, intelligence studies, or cybersecurity, or relevant work experience and/or training.
- Preferred experience includes Falcon SOAR, LogScale, AI workflow frameworks, LLM integration, NIST, MITRE ATT&CK, AWS, Azure, GCP, CrowdStrike Falcon APIs, generative AI, and prompt engineering.
Benefits
- Remote work arrangement.
- Comprehensive physical and mental wellness programs.
- Competitive vacation and holiday time.
- Paid parental and adoption leave.
- Professional development opportunities.
- Employee networks, geographic neighborhood groups, and volunteer opportunities.
- Health insurance, 401k, paid time off, bonuses, and equity eligibility.
- The role may periodically require alcohol and/or drug testing during employment.
About CrowdStrike
CrowdStrike builds the Falcon cloud-native security platform used by enterprises and governments to protect endpoints, cloud workloads, identities, and data with EDR, next-generation antivirus, threat intelligence, and managed threat hunting. Founded in 2011 and publicly traded on NASDAQ as CRWD, the company sells primarily by subscription and also provides incident response services; its systems ingest and analyze nearly 3 trillion security events per day across customer environments.