Hybrid Senior Detections Engineer

at CrowdStrike

• Job title: Senior Detections Engineer
• Job type: Full Time
• Experience level: Senior
• Salary: Not specified
• Degree requirement: No Education Requirement
• Tech skills: AWS, Azure, Cloud, Google Cloud Platform, Python, Splunk
• Location requirements: Hybrid, Tel Aviv, Israel

About the role

• Research and develop detection rules for cloud security threats at CrowdStrike. Collaborate with a diverse team while focusing on customer risk management and alerting.

Responsibilities

• As a member of the Falcon Cloud Security Detection Engineering team, you will be responsible for performing research into cloud threats, vulnerabilities, and abuses, to determine configuration best practices that can be used to secure cloud services and assets.
• You will also be responsible for developing and deploying detection rules as code into the FCS product ecosystem along with writing descriptions that customers will use to understand and action alerts generated by these rules.
• While this role is being sourced in the EMEA global region, the core of the FCS Detection Engineering team is US-based.
• This role will honor a working day within local standard business hours for each team member, but will also require regular participation in team meetings and live collaboration with US-based staff. Candidates should expect a variable working window that may shift from starting at 9:00am to 10:00am and end at 6:00pm to 7:00pm.

Requirements

• Professional experience in cloud security-related operations and engineering roles, specifically related to threat detection, incident response, and risk management.
• Experience with data analytics, including searching large data sets, correlating attributes, interpreting results, extracting insights, and forming data-driven conclusions.
• Experience with searching data with analytics tools including Elastic Search, Splunk, or a SIEM.
• A working practical knowledge of at least one of the following Cloud Service Providers: AWS, Azure, GCP, OCI.
• A practical understanding of industry security standards and control frameworks such as NIST, CISA, CIS, HIPAA, HISTRUST, PCI and others.
• Experience developing, deploying, and maintaining code in formalized software development/CICD workflows including the use of BitBucket to manage code deployments.
• Familiarity with the Agile methodology for project management.
• Experience in a DevOps or similar role that required use of Python and GO.
• Ability to author and run Elastic Search queries and interpret results from large data sets.
• Proficient in the English language with strong written and verbal communication skills.
• A passion for quality and experience optimizing results.
• Bonus Experience writing detection rules with the Open Policy Agent query language, Rego.
• Having served in a role focused on Detection Engineering; writing detection rules used by other teams.
• Formalized training or certification in cloud computing, including administration, development, engineering, or architecture.

Benefits

• Market leader in compensation and equity awards
• Comprehensive physical and mental wellness programs
• Competitive vacation and holidays for recharge
• Paid parental and adoption leaves
• Professional development opportunities for all employees regardless of level or role
• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
• Vibrant office culture with world class amenities
• Great Place to Work Certified™ across the globe