Engineer III – SIEM Integrations (Hybrid)
Core
Design, develop, and maintain out-of-the-box data connectors and parsers to ingest and normalize security data from third-party products into CrowdStrike Next-Gen SIEM.
Role type
Senior IC Security Engineer (SIEM Integrations)
Builds
Production data ingestion pipelines and connectors for Next-Gen SIEM
Domain
Cybersecurity / SIEM / Log Management
Deliverable
production ML models | product features
Required skills
Data ingestion pipelines, SIEM integrations, Security data normalization, Log parsing (Syslog, CEF, JSON, XML), Cloud-native logging services, Python or Go
Preferred skills
Experience with Splunk, Sentinel, Exabeam, QRadar, Cribl, Security event processing
Technologies
Splunk, Sentinel, Exabeam, QRadar, Cribl, Syslog, CEF, LEEF, JSON, XML, AWS CloudWatch, Azure Monitor, GCP Logging
Responsibilities
Evaluate, develop, and enhance data connectors for third-party security products; Set up and maintain lab environments for validation and troubleshooting; Research and implement best practices for ingesting logs from Firewalls, IDS/IPS, and EDR; Write technical documentation for integration methods; Provide on-call support for critical ingestion issues
Seniority
Senior, hands-on IC
