Engineer III - Sensor, Windows Vulnerability Research & Detection (Remote)

Posted 13 Days Ago
Be an Early Applicant
Hiring Remotely in USA
Remote
110K-180K Annually
Mid level
Cloud • Information Technology • Sales • Security • Cybersecurity
Define your future at CrowdStrike.
The Role
The Software Engineer III will join the CRED team, focusing on vulnerability research and exploit detection on Windows OS. Responsibilities include developing detection strategies, coding in both user-mode and kernel-mode, and collaborating with various teams to improve sensor performance and security response.
Summary Generated by Built In

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day. We have 3.44 PB of RAM deployed across our fleet of C* servers - and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We’re also a mission-driven company. We cultivate an inclusive culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role:

CrowdStrike is looking for a Software Engineer III to join our growing Content Research & Exploit Detection team within the Content group, which focuses on emerging vulnerability research, exploit mitigations, and security-related endpoint development on the Windows operating system. 

The Content group plays a central role in fulfilling CrowdStrike’s mission to Stop Breaches. Within the Content Research & Exploit Detection team (CRED), we research the latest common vulnerabilities and exposures (CVEs) to develop tools and techniques that expand sensor visibility and explore ways to detect advanced malicious behavior on customer endpoint devices. Our goal is to enable the sensor to autonomously identify and stop tools, techniques, and procedures where possible, and to provide useful visibility and guidance to security analysts when new previously unknown adversary activity occurs. 

As a software engineer III within the CRED  team, you will be focused on the analysis and development of detection strategies for attack techniques across supported Windows OS versions. You’ll work collaboratively to implement detection logic within the Falcon sensor which includes both user-mode and kernel-mode components that together observe system activity, recognize malicious behavior, provide on-box prevention and remediation capabilities, and send relevant security related telemetry to the Falcon Cloud. You’ll help find creative and resourceful ways to detect Windows specific threats while also helping to develop features that leverage telemetry from common OS subsystems such as: file system, memory, process, and network activity. You’ll get exposure to both user-mode and kernel-mode coding practices. 

As a Software Engineer III, you will also collaborate with a wide range of other teams across the group as you help contribute to team initiatives and assist with operational response requirements. You’ll be expected to make contributions from the initial concept phase through design, implementation, release, and bugtail/support with a focus and passion for sensor performance, testing, and feature support. We're looking for smart people who want to be challenged and take ownership of what they build. 

What You'll Do:

  • Recognize common weaknesses and build proof of concepts that can exercise vulnerable code paths.

  •  Design and build detection logic and systems leveraged across teams within CrowdStrike to detect cyber attackers and stop breaches.

  •  Extend our existing codebase and test suites utilizing C, C++, Python, and other tools as appropriate.

  • Brainstorm, define, and build collaboratively across multiple teams.

  • Obsess about learning, and champion the newest technologies & tricks with others, raising the technical IQ of the team.

  •  Deliver and accept feedback with grace and courtesy.

  •  Troubleshoot issues within the product when necessary, assisting customer support, test breaks, crash dumps, and release blockers.

  •  Leverage your understanding of engineering best practices, including topics like secure coding, testing paradigms, effective peer code reviews, logging, and resilient architecture patterns, to ensure clean, supportable coding practices.

  •  Be an energetic ‘self-starter’ who is empowered to take ownership and be accountable for deliverables, both individually and as part of a growing team.

What You'll Need:

  •  Post-secondary education in computer science, engineering, or information security OR relevant experience.

  •  Low-level OS knowledge of Windows operating system internals, security features, components, APIs, and design.

  • Proficiency in multiple programming languages including C, C++, and Python as well as familiarity with multiple processor architectures

  • Recent and relevant experience in vulnerability analysis and exploitation techniques,

  • Experience in software instrumentation, testing, and code coverage analysis

  •  Knowledge of cyber security practices, challenges, tools, and techniques

  • Team player – able to lead, mentor, communicate, collaborate, and work effectively in a globally distributed team.

Bonus Points:

  •   At least one of the following certifications is desirable:

    •  Offensive Security Certified (OSCP, OSCE, OSEE)

    •  Council of Registered Security Testers (CREST) Registered or Certified Professional certificate

    •  SANS GIAC Penetration Tester, Web Application Penetration Tester, Exploit Researcher and Advanced Penetration Tester

  •  Prior experience working with low-level code, such as OS kernel components, minifilters, or device drivers.  

  • Understanding of kernel-mode and multi-threaded concurrent systems development in any of our supported platforms, with an interest to grow skills in all of them.

  •  Prior penetration testing experience.

  •  Prior experience delivering software via agile processes.

  •  Prior participation in cyber security challenges (e.g. CTFs). 

#LI-CW1

#LI-Remote

#HTF

Benefits of Working at CrowdStrike:

  • Remote-friendly and flexible work culture

  • Market leader in compensation and equity awards

  • Comprehensive physical and mental wellness programs

  • Competitive vacation and holidays for recharge

  • Paid parental and adoption leaves

  • Professional development opportunities for all employees regardless of level or role

  • Employee Resource Groups, geographic neighbourhood groups and volunteer opportunities to build connections

  • Vibrant office culture with world class amenities

  • Great Place to Work Certified™ across the globe

CrowdStrike is proud to be an equal opportunity and affirmative action employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. Our approach to cultivating a diverse, equitable, and inclusive culture is rooted in listening, learning and collective action. By embracing the diversity of our people, we achieve our best work and fuel innovation - generating the best possible outcomes for our customers and the communities they serve.
 

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at [email protected] for further assistance.

Find out more about your rights as an applicant.

CrowdStrike participates in the E-Verify program.

Notice of E-Verify Participation

Right to Work

CrowdStrike, Inc. is committed to fair and equitable compensation practices. The base salary range for this position in the U.S. is $110,000 - $180,000 per year + variable/incentive compensation + equity + benefits. A candidate's salary is determined by various factors including, but not limited to, relevant work experience, skills, certifications, job level, supervisory status, and location.

Expected Close Date of Job Posting is:11-17-2024

Top Skills

Cassandra
Windows

What the Team is Saying

Andrew C.
Lauren P.
Brian P.
Alexa Z.
Theo K.
Sara I.
Lam N.
Lauren B.
Adeeb C.
Kristan C.
Alena C.
Thaddeus M.
Alyssa J.
KT T.
The Company
HQ: Austin, TX
10,000 Employees
Hybrid Workplace
Year Founded: 2011

What We Do

CrowdStrike has redefined security with the world’s most advanced cloud-native platform that protects and enables the people, processes and technologies that drive modern enterprise. Tested and proven, the world's largest organizations trust CrowdStrike to stop breaches with unparalleled protection against the most sophisticated cyberattacks.

The CrowdStrike culture has been built upon our Core Values since the day we began. We are Fanatical About the Customer, Relentlessly Focused on Innovation and believe that our Limitless Passion drives Unlimited Potential for every CrowdStriker. As a purpose-built remote-first company, we believe cultivating a connected culture for every employee, no matter where they are in the world, is a key ingredient in building a high-performing, diverse team.

We don’t have a mission statement. We’re on a mission—to stop breaches. Ready to join a mission that matters?

Why Work With Us

We have a culture that celebrates achievement, encourages flexibility and innovation and thrives on teamwork. We all work towards a single mission: to stop breaches. This common goal drives a sense of community and connection among our people across the globe.

Gallery

Gallery
Gallery
Gallery
Gallery
Gallery
Gallery
Gallery
Gallery
Gallery
Gallery

CrowdStrike Offices

Hybrid Workspace

Employees engage in a combination of remote and on-site work.

Typical time on-site: Flexible
HQAustin, TX
Singapore
Osaka
Aarhus, DK
Arlington, VA
Barcelona, ES
Bengaluru, IN
Brussels, BE
Bucharest, RO
Cheltenham, GB
Copenhagen, DK
Dubai, Dubai
Irvine, CA
Kirkland, WA
Minneapolis, MN
Mumbai, IN
New Delhi, IN
Pune, IN
Reading, GB
Riyadh, SA
St Louis, MO
Sydney, Sydney
Tel Aviv-Yafo, IL
Tokyo, Japan
Learn more

Similar Jobs

CrowdStrike Logo CrowdStrike

SOC Analyst, Falcon Complete (Hybrid)

Cloud • Information Technology • Sales • Security • Cybersecurity
Remote
USA
10000 Employees
80K-130K Annually

CrowdStrike Logo CrowdStrike

Professional Services Explorer Intern - Summer 2025 (Remote)

Cloud • Information Technology • Sales • Security • Cybersecurity
Remote
6 Locations
10000 Employees

CrowdStrike Logo CrowdStrike

Intelligence Analyst Intern, eCrime - Summer 2025 (Remote)

Cloud • Information Technology • Sales • Security • Cybersecurity
Remote
VA, USA
10000 Employees

CrowdStrike Logo CrowdStrike

Technology Ecosystem Director (Remote)

Cloud • Information Technology • Sales • Security • Cybersecurity
Remote
USA
10000 Employees
150K-240K Annually

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account