Engineer III - Threat Detection (Hybrid)

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We’re also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role:

The Cloud Content team is a major contributor to Falcon Cloud Security Platform, tasked with the critical mission of safeguarding cloud environments through innovative detection and response capabilities. This specialized team comprises cloud security experts, researchers, and detection engineers in various time zones working in unison to ensure our customers’ cloud workloads are secure against the ever-changing threats in the security landscape. 

This role provides a unique opportunity to join a team with strategic importance to protecting our customers from emerging threats and novel attack methodologies in both cloud and Linux based environments. You will stay ahead of the curve with regards to the threat landscape and your research will directly impact the direction of the team and our product.

If you have a strong passion for security and technology, have an interest in supporting engineering projects, and want to gain real-world experience in dealing with advanced threat actors targeting cloud environments, we have a role for you!
Your contributions will enable continuous improvement of CrowdStrike’s cloud detection capabilities ensuring that our customers can be secured with the most advanced security measures in place.

This role is hybrid (in office 2-3x a week).

What You'll Do:

• Stay abreast of the latest threat landscape and cloud security trends, continuously updating detection strategies to address emerging threats and vulnerabilities

• Rapid response to potential malicious campaigns or extensive exploitation of cloud runtime resources post vulnerabilities disclosure

• Conduct proactive threat hunting exercises to identify potential security gaps and emerging threats within cloud environments

• Track and present threat detection findings, including recommended strategies or possible product improvements

• Develop, implement and optimize detections tailored to cloud runtime environments. 

• Collaborate with cross functional teams: Work closely with various teams, including OverWatch, engineering, product management, detection engineering, and threat intelligence to drive cloud detections in the Crowdstrike falcon platform

• As part of your role, you will be required to write and publish blog posts regularly and represent our company by speaking at various industry conferences to enhance our visibility and engagement with the community.

What You'll Need:

• You have a good understanding of  Linux-based systems.

• You can demonstrate experience in container/container orchestrator based intrusion analysis, detection development or malware analysis,

• You are comfortable assessing cyber threat intelligence, open source intelligence or partner reporting,

• You have a keen interest in the security research field (following subject matter expert blogs, building up static and dynamic analysis environment),

• You have knowledge of programming and scripting languages, in particular Python or Bash,

• You have experience with large scale data analysis,

• You are capable and comfortable communicating information to both technical and nontechnical stakeholders,

• You have a deep drive to “stop the bad guys”,

• Good problem solving, communication, and teamwork skills.

Bonus Points:

• You have understanding of cloud-based infrastructure and cloud service models (IaaS, PaaS, Saas),

• You have extensive experience in securing services operating on public cloud services (Azure, AWS, Google Cloud),

• You have a good understanding of managed Kubernetes services (AKS, EKS, GKS),

• Contributions to the open source community (GitHub, Stack Overflow, blogging)

• Published research papers at conferences or through other mediums (blogs, articles)

#LI-Hybrid

#LI-DR1

#HTF

Benefits of Working at CrowdStrike:

• Market leader in compensation and equity awards

• Comprehensive physical and mental wellness programs

• Competitive vacation and holidays for recharge

• Paid parental and adoption leaves

• Professional development opportunities for all employees regardless of level or role

• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections

• Vibrant office culture with world class amenities

• Great Place to Work Certified™ across the globe

CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.

CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements.

If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at [email protected] for further assistance.

Find out more about your rights as an applicant.

CrowdStrike participates in the E-Verify program.

Notice of E-Verify Participation

Right to Work

For detailed information about the U.S. benefits package, please click here.