Principal Detection Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇬🇧 United Kingdom – Remote

⏰ Full Time

🔴 Lead

👷🏻‍♀️ Engineer

🇬🇧 UK Skilled Worker Visa Sponsor

This company has sponsored UK Skilled Worker visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CrowdStrike

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 2011

🔒 Cybersecurity

☁️ SaaS

🤖 Artificial Intelligence

Cybersecurity • SaaS • Artificial Intelligence

CrowdStrike is a cybersecurity company that provides cloud-based security services to stop breaches. It is recognized as a leader in endpoint protection, identity and cloud security, and managed detection and response. CrowdStrike's platform, Falcon, integrates artificial intelligence to offer real-time visibility, detection, and protection against sophisticated cyber threats. The company is lauded for its effectiveness in securing networks and data, making it a trusted partner for businesses worldwide.

📋 Description

• Own cross-domain detection strategy across endpoint, cloud, NG-SIEM, identity, SaaS security, and FEM • Identify detection coverage gaps across attack surfaces and work with teams to close them systematically • Design high-fidelity correlation detections using entity resolution, temporal reasoning, and behavioral layering • Deliver high-severity, low-false-positive detections via Platform IOAs (CDE) • Monitor internal and external intelligence sources and translate threat landscape shifts into detection investment decisions • Partner with OverWatch, Falcon Complete, product managers, and customer success teams • Coordinate cross-team detection development so multi-domain scenarios receive coverage across relevant surfaces • Apply automation and AI/LLMs to gap analysis, threat-intelligence triage, and correlation-logic prototyping • Drive adoption of AI-assisted workflows across detection engineering • Coach detection engineers, provide technical direction, conduct PR reviews, and co-develop solutions to difficult problems • Influence sensor, product, and platform direction by identifying and closing telemetry and event-coverage gaps

🎯 Requirements

• Extensive experience writing production detection content across multiple platforms or data domains • Deep understanding of telemetry sources, their limitations, and coverage gaps • Demonstrated ability to reason about threats spanning endpoint, cloud, identity, SaaS, network, and runtime surfaces • Experience designing or contributing to detections that correlate signals across domains • Current knowledge of threat actors, campaigns, and TTPs • Ability to translate threat intelligence into detection requirements and prioritization decisions • Experience with detection content lifecycle management, including aging rules, false-positive drift, performance cost, and deprecation decisions • Experience operating where detection quality is measured and maintained over time • Strong communication and influence across multiple teams and leadership levels • Experience guiding or mentoring detection engineers, reviewing detection content at scale, or setting technical standards • Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes • Bonus: Experience applying AI/LLM to detection or security operations workflows • Bonus: EDR or SIEM vendor-side product experience • Bonus: MITRE ATT&CK fluency across multiple platforms • Bonus: Published security research, malware analysis, or reverse engineering background • Bonus: Experience quantifying detection efficacy, including precision, recall, and bypass resistance

🏖️ Benefits

• Market leader in compensation and equity awards • Comprehensive physical and mental wellness programs • Competitive vacation and holidays for recharge • Paid parental and adoption leaves • Professional development opportunities for all employees regardless of level or role • Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections • Vibrant office culture with world class amenities • Great Place to Work Certified™ across the globe