Engineer III - SIEM Integrations

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn't changed - we're here to stop breaches, and we've redefined modern security with the world's most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily . Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We're always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role:

Next Gen-SIEM Integrations team at Next Gen-SIEM is responsible for building out of the box integrations for 3rd party products to ingest data into SIEM platform. We are looking for a passionate Security Engineer with expertise in data ingestion and integration for SIEM. This role focuses on designing, developing, and maintaining out of the box data connectors for CrowdStrike Next-Gen SIEM, ensuring seamless ingestion of security data from various third-party products.

The ideal candidate has hands-on experience in cybersecurity, data ingestion pipelines, log collection mechanisms, and security event processing. You should be well-versed in industry-standard data ingestion and integration methods and possess strong knowledge about security products and platform

What You'll Do:

• Evaluate, develop, maintain, and enhance data connectors to ingest data from third-party security products into CrowdStrike Next-Gen SIEM
• Set up and maintain a lab or test environment for security products to validate data connectors and troubleshoot issues
• Troubleshoot and resolve issues with existing data connectors to ensure reliable log ingestion
• Collaborate with internal teams to define efficient logging, error handling, data normalization and documentation for data connectors
• Research and implement best practices for ingesting security logs from Firewalls, IDS/IPS, Cloud Security products, Endpoint Security, and other security products and platforms
• Write and maintain high-quality technical documentation for integration methods and troubleshooting guides
• Provide on-call support for critical data ingestion issues and production incidents
• Work with customers, customer success and customer support teams to troubleshoot and resolve data ingestion-related issues and ensure effective communication

• Bachelor's or Master's degree in Computer Science or related field or equivalent work experience.
• 5+ years of experience in cybersecurity and SIEM integrations
• Experience in developing data connectors or ingestion pipelines for SIEM platforms such as Splunk, Sentinel, Exabeam, QRadar etc.
• Experience in setting up and managing environments for security products such as Firewalls, IDS/IPS, EDR, CASB, Identity Security, Email Security etc.
• Experience with security events and its formats such as Syslog, CEF, LEEF, JSON, XML
• Working knowledge of log processing or shipping tools such as Cribl, Splunk forwarder, Azure monitoring agent, LogScale log collector etc.
• Proficiency in at least one programming language, preferably Python
• Strong documentation, communication and customer interaction skills

• Knowledge with cloud-native logging services such as AWS CloudWatch, Azure Monitor, or GCP Logging
• Knowledge of security data normalization schemas, parsing and data enrichment

• Remote-friendly and flexible work culture
• Market leader in compensation and equity awards
• Comprehensive physical and mental wellness programs
• Competitive vacation and holidays for recharge
• Paid parental and adoption leaves
• Professional development opportunities for all employees regardless of level or role
• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
• Vibrant office culture with world class amenities
• Great Place to Work Certified™ across the globe