Engineer III – SIEM Integrations
Core
Designing, developing, and maintaining out-of-the-box data connectors to ingest and parse security data from third-party products into CrowdStrike Next-Gen SIEM.
Role type
Senior Security Engineer (SIEM Integrations)
Builds
Out-of-the-box data connectors and parsers for third-party security products
Domain
Cybersecurity, SIEM, Data Ingestion
Deliverable
production ML models | product features
Required skills
Data ingestion pipelines, Security event processing, Data normalization schemas, Log parsing (Syslog, CEF, LEEF, JSON, XML), Security products (Firewalls, IDS/IPS, EDR, CASB), Programming (Python or Go), Technical documentation
Preferred skills
Cloud-native logging services (AWS CloudWatch, Azure Monitor, GCP Logging), AI technologies for workflow enhancement
Technologies
Splunk, Sentinel, Exabeam, QRadar, Cribl, Splunk forwarder, Azure monitoring agent, LogScale log collector, Syslog, CEF, LEEF, JSON, XML
Responsibilities
Evaluate, develop, maintain, and enhance data connectors and parsers; Set up and maintain lab environments for validation; Troubleshoot and resolve data ingestion issues; Collaborate on logging, error handling, and data normalization; Research best practices for security log ingestion; Write technical documentation; Provide on-call support for critical incidents; Work with customer support teams on ingestion issues
Seniority
Senior, hands-on IC
