{"id":3913337,"url":"https://alion.io/job/crowdstrike-cloud-detection-engineer-cloud-hybrid-isr","title":"Cloud Detection Engineer, Cloud (Hybrid, ISR)","company":{"id":2153,"name":"CrowdStrike","domain":"crowdstrike.com","url":"https://alion.io/company/crowdstrike","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":97,"open_postings":37,"ghost_share":0,"stale_share":0.108,"repost_share":0.027,"time_to_fill_p50_days":35,"computed_at":"2026-11-07T05:47:08Z"}},"role":"DevOps","role_family":"DevOps","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tel Aviv, Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Agile","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bitbucket","optional":false},{"name":"CI/CD","optional":false},{"name":"Crowdstrike","optional":false},{"name":"ElasticSearch","optional":false},{"name":"GCP","optional":false},{"name":"Python","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Open Policy Agent","optional":true}],"status":"live","first_seen_at":"2026-11-05T00:00:00Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-08T02:23:19Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed - we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.\nAbout the Role:\nThe Falcon Cloud Security (FCS) Detection Engineering team enables CrowdStrike’s primary mission of Stopping the Breach, through a shift-left approach that focuses on helping customers of cloud computing manage their risk posture. We do this by writing and maintaining detection rules that assess cloud assets to identify risks and opportunities for improvement. We start by using research to define best practices for cloud security, which we translate into detection rules we author and deploy as code into the FCS product ecosystem. In addition to posture management, the Detection Engineering team researches threats to cloud services & assets, and writes detection rules to identify abuses and attacks.\nThis role combines a blend of skill sets including security operations & incident response, data analytics, risk management, software development, and threat research. If you enjoy researching cloud security issues and developing detection content as code, all in a fast-paced environment with broad collaboration across a diverse team, this role is for you.\nWhat You'll Do:\nAs a member of the Falcon Cloud Security Detection Engineering team, you will be responsible for performing research into cloud threats, vulnerabilities, and abuses, to determine configuration best practices that can be used to secure cloud services and assets. You will also be responsible for developing and deploying detection rules as code into the FCS product ecosystem along with writing descriptions that customers will use to understand and action alerts generated by these rules.\nThis role will honor a working day within local standard business hours for each team member, but will also require regular participation in team meetings and live collaboration with US-based staff. Candidates should expect a variable working window that may shift from starting at 9:00am to 10:00am and end at 6:00pm to 7:00pm.\nWhat You’ll Need:\nProfessional experience in cloud security-related operations and engineering roles, specifically related to threat detection, incident response, and risk management.\nExperience with data analytics, including searching large data sets, correlating attributes, interpreting results, extracting insights, and forming data-driven conclusions.\nExperience with searching data with analytics tools including Elastic Search, Splunk, or a SIEM.\nA working practical knowledge of at least one of the following Cloud Service Providers: AWS, Azure, GCP, OCI.\nExperience developing, deploying, and maintaining code in formalized software development/CICD workflows including the use of BitBucket to manage code deployments.\nFamiliarity with the Agile methodology for project management.\nExperience in a DevOps or similar role that required use of Python and GO.\nAbility to author and run Elastic Search queries and interpret results from large data sets. \nProficient in the English language with strong written and verbal communication skills.\nA passion for quality and experience optimizing results.\nProven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.\nBonus Points:\nExperience writing detection rules with the Open Policy Agent query language, Rego.\nHaving served in a role focused on Detection Engineering; writing detection rules used by other teams.\nFormalized training or certification in cloud computing, including administration, development, engineering, or architecture.\nBenefits of Working at CrowdStrike:\nMarket leader in compensation and equity awards\nComprehensive physical and mental wellness programs\nCompetitive vacation and holidays for recharge\nPaid parental and adoption leaves\nProfessional development opportunities for all employees regardless of level or role\nEmployee Networks, geographic neighborhood groups, and volunteer opportunities to build connections\nVibrant office culture with world class amenities\nGreat Place to Work Certified™ across the globe \nCrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.\nCrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements.\nIf you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at  for further assistance.","description_format":"text","description_chars":6719,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Equity","Professional development","Wellness"],"hiring_locations":[{"name":"Israel","iso":"IL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Endpoint Security","Security Operations"],"lifecycle":[{"event":"open","at":"2026-11-07T09:25:15Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":3,"expected_fill_days":35,"reasons":["conf:0","win:early","comp:brand"],"computed_at":"2026-11-08T02:37:34Z"},"pay":null,"html_url":"https://alion.io/job/crowdstrike-cloud-detection-engineer-cloud-hybrid-isr","json_url":"https://alion.io/job/crowdstrike-cloud-detection-engineer-cloud-hybrid-isr.json","meta":{"generated_at":"2026-11-08T02:37:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5594,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2153},"rest":"https://alion.io/mcp/rest/get_company?id=2153"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcrowdstrike-cloud-detection-engineer-cloud-hybrid-isr"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcrowdstrike-cloud-detection-engineer-cloud-hybrid-isr"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcrowdstrike-cloud-detection-engineer-cloud-hybrid-isr"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/crowdstrike-cloud-detection-engineer-cloud-hybrid-isr\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcrowdstrike-cloud-detection-engineer-cloud-hybrid-isr"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3913337}},{"tool":"search_jobs","arguments":{"company":"crowdstrike.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3913337},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}