Jobs at CrowdStrike

Own the global vision and multi-year strategy for CrowdStrike’s Next-Gen SIEM platform, focusing on scalable data ingestion, third-party connectors, integrations, log management, and security analytics. Lead cross-functional architecture alignment, define operational SLOs, translate customer and partner needs into product requirements, enable ecosystem integrations, mentor product managers and engineers, and drive innovation across distributed global teams.

Lead backend engineering for CrowdStrike’s Cloud Detection Engine, designing and scaling resilient services that process internet-scale data streams and support real-time threat detection. Build cloud-based distributed systems, data pipelines, detection logic, and platform capabilities across Falcon products. Collaborate across teams, improve architecture and performance, mentor engineers, and own systems from design through production using modern engineering practices and AI-enabled workflows.

Lead a software engineering team building and maintaining automation tools for CrowdStrike’s private cloud-native infrastructure. Own team workload, hiring, mentoring, architecture, engineering quality, and production support. Guide development of scalable distributed systems, deployment tooling, CI/CD pipelines, automated testing, and containerized environments. Collaborate across engineering, product, project management, and executive teams while improving operational efficiency through AI technologies.

Manage an engineering team building reusable infrastructure platforms and core distributed systems. Architect highly available services, review designs, plan roadmaps, optimize cloud costs, and enforce deployment standards across AWS and GCP. Lead planning, retrospectives, on-call practices, and reliability initiatives involving SRE, CI/CD, chaos engineering, and incident analysis. Develop engineering strategy, mentor senior engineers, and influence platform decisions across product teams.

Design, implement, operate, and troubleshoot CrowdStrike’s global multi-vendor, multi-cloud, hybrid data center networks. Build cloud connectivity and network constructs, develop infrastructure-as-code and automation using Ansible, Terraform, Python, and Go, improve resilience and deployment efficiency, support incident analysis and on-call rotations, and ensure compliance with regional data sovereignty and security requirements.

The role involves developing and improving a Windows kernel mode sensor for cybersecurity, leading projects, and collaborating across platforms to enhance endpoint security features.

Develop and maintain scalable cloud ecosystems using Golang and Python, enhancing backend microservices and collaborating within a fast-paced team.

Responsible for Linux engineering and administration at scale, ensuring availability, latency, throughput, monitoring, incident response, capacity planning and performance tuning. Develop automation and tooling, lead incident analysis, participate in on-call rotation, troubleshoot hardware, and collaborate globally to improve reliability and observability across the commercial cloud platform.

Design and implement a scalable cloud detection engine that processes billions of events across multi-cloud environments. Build custom query languages, event orchestration and correlation systems, collaborate with security researchers to convert detections into production features, lead backend engineering, mentor teammates, and improve architecture, performance, and reliability using Go, cloud platforms, Kafka, Cassandra, Docker and related technologies.

Build and maintain ultra-high-scale data platforms and pipelines (petabyte scale). Write fault-tolerant Java/Spark code, design low-latency query capabilities, improve performance and stability, participate in technical reviews, and enable customers/internal teams to query and extract analytics from event data.

Build and scale cloud-native backend services for a global detection-engine platform. Design high-performance, resilient distributed systems, collaborate across teams, mentor engineers, and drive testing, CI, and AI-enhanced detection workflows at internet scale.

Build, operate, and scale CrowdStrike's global backbone and hybrid cloud networks. Design and implement IP and optical solutions, drive capacity planning, evaluate technologies, automate with IaC and CI/CD, support cloud networking, lead projects from ideation to implementation, and participate in 24x7 on-call rotation.

Lead customer deployments of platform services from pre-kickoff through closure. Manage project plans, schedules, budgets, resources, risks, documentation, and technical teams. Coordinate with customers, sales, product, support, engineers, and consultants to ensure high-quality delivery. Apply Agile and waterfall methodologies, conduct post-implementation reviews, and use AI technologies to improve workflows and decision-making. Strong SIEM knowledge, particularly in security-focused IT projects, is required.

Deliver professional services for Falcon Next-Gen SIEM, helping customers implement log management, XDR, and SOAR capabilities. Provide technical guidance, integrations, knowledge transfer, documentation, and trusted advisory support. Collaborate with engineering and product teams to communicate customer requirements and influence product improvements. The role requires SIEM and SOAR experience, cloud platform knowledge, IT security expertise, scripting and automation skills, AI platform experience, and strong communication abilities.

Monitor and analyze security alerts, handle incidents across Windows, Mac, and Linux, perform malware analysis, and remotely remediate malicious activity. The role also develops detection and response processes, communicates findings and recommendations to customers, contributes to security procedures, and supports thought leadership through public content and speaking engagements.

Lead and mentor a data science team developing machine learning systems for threat detection and agentic AI. Set ML technical strategy, standards, roadmaps, and deployment practices; guide projects from research through production; collaborate with security, engineering, and product teams; develop advanced malware and behavioral threat models; communicate insights; and contribute to research, publications, patents, and hands-on technical work.

Provide incident handling, malware analysis, forensic investigation, remediation, detection engineering, and security automation across Windows, macOS, and Linux environments. Configure and optimize CrowdStrike Falcon modules, develop security content and automations, advise customers during incidents, produce technical findings, and support platform onboarding. The role also involves customer communication, thought leadership, operational improvement, and mentoring.

Analyze adversary activity and communicate findings to customers. Conduct threat hunting and intrusion analysis using endpoint telemetry, network and host-based analysis, digital forensics, and cyber threat intelligence. Research nation-state adversaries, improve detection capabilities, and support security investigations. The role also involves customer communication, tool development, cross-functional collaboration, and using AI technologies to improve workflows and decision-making.

Design, build, operate, and maintain scalable distributed systems supporting CrowdStrike’s Intelligence pipelines. Gather requirements from analysts, develop processing and data integration systems, make autonomous architecture decisions, maintain Go and Python codebases, deploy production services, document solutions, train users, and communicate technical details effectively. The role requires independent execution in a geographically distributed team and includes opportunities to work with cloud platforms, APIs, web interfaces, malware analysis, and AI technologies.

Leads research and production development of generative AI and large language model systems for cybersecurity. Responsibilities include defining AI research strategy, developing novel reasoning and summarization approaches, selecting model architectures and deployment strategies, building large-scale production systems, mentoring scientists, establishing evaluation standards, and guiding cross-functional technical initiatives. The role also represents the company through publications, speaking engagements, and technical thought leadership.