Detection & Response Engineer

Responsibilities

• Investigate security cases and targeted hunts using CrowdStrike Falcon Next-Gen SIEM and CQL; correlate telemetry, assess scope and impact, document findings, and recommend appropriate actions.
• Develop, test, deploy, tune, and maintain detection logic, queries, dashboards, analyst guides, and version-controlled detection content.
• Build and maintain Falcon Fusion SOAR workflows for enrichment, evidence capture, routing, escalation, and authorized response.
• Validate telemetry coverage and quality; troubleshoot parsing, normalization, mapping, and source-data issues.
• Translate validated investigations into platform workflow specifications and co-build scripts, API integrations, workflow components, and prototypes with Product and Engineering.
• Test workflows and detections against representative cases; monitor outcomes, exceptions, and production feedback, and document ownership and support handoffs.
• Provide technical support, troubleshooting, knowledge transfer, and coaching; coordinate assigned analysis and platform work.

Languages

Required

• Production proficiency with CrowdStrike Falcon Next-Gen SIEM, including CQL, cross-source investigations, detection content, telemetry interpretation, and tuning.
• Practical Python, REST/Falcon APIs, JSON, authentication, error handling, and secure credential management; familiarity with PowerShell or another relevant scripting language.
• Experience with telemetry onboarding, parser/normalization troubleshooting, MITRE ATT&CK, Windows/Linux events, and controlled changes, version control, peer review, and regression testing.

Nice to have

• Strong investigation judgment, defensible documentation, communication, and cross-functional collaboration skills.
• CrowdStrike resident, responder, partner implementation, or customer-embedded Falcon experience; FalconPy or comparable API tooling.
• Managed security services, multi-client or follow-the-sun SOC operations, and ITSM integrations such as ServiceNow or Jira.

Other open roles here

• Data EngineerRemote · worldwide, UTC+4 accepted
• Creative Strategist (YouTube Ads)Remote · Armenia
• Junior RecruiterRemote · Armenia
• Coherency Verification EngineerRemote · worldwide, UTC+4 accepted
• HR Generalist and RecruiterRemote · Armenia