Jobs at CrowdStrike

A 12-week remote incident response internship covering host and cloud forensics, large-scale log analysis, red teaming, strategic consulting, project management, ransomware response, and the CrowdStrike Falcon platform. Interns complete specialized training and a mock engagement while developing technical and consulting skills. Candidates must be pursuing a relevant degree, be in their penultimate undergraduate year, have UK work eligibility, and demonstrate experience using AI technologies.

Own the global vision and multi-year strategy for CrowdStrike’s Next-Gen SIEM platform, focusing on scalable data ingestion, third-party connectors, integrations, log management, and security analytics. Lead cross-functional architecture alignment, define operational SLOs, translate customer and partner needs into product requirements, enable ecosystem integrations, mentor product managers and engineers, and drive innovation across distributed global teams.

Manage an engineering team building reusable infrastructure platforms and core distributed systems. Architect highly available services, review designs, plan roadmaps, optimize cloud costs, and enforce deployment standards across AWS and GCP. Lead planning, retrospectives, on-call practices, and reliability initiatives involving SRE, CI/CD, chaos engineering, and incident analysis. Develop engineering strategy, mentor senior engineers, and influence platform decisions across product teams.

Design, implement, operate, and troubleshoot CrowdStrike’s global multi-vendor, multi-cloud, hybrid data center networks. Build cloud connectivity and network constructs, develop infrastructure-as-code and automation using Ansible, Terraform, Python, and Go, improve resilience and deployment efficiency, support incident analysis and on-call rotations, and ensure compliance with regional data sovereignty and security requirements.

The role involves developing and improving a Windows kernel mode sensor for cybersecurity, leading projects, and collaborating across platforms to enhance endpoint security features.

Design and implement a scalable cloud detection engine that processes billions of events across multi-cloud environments. Build custom query languages, event orchestration and correlation systems, collaborate with security researchers to convert detections into production features, lead backend engineering, mentor teammates, and improve architecture, performance, and reliability using Go, cloud platforms, Kafka, Cassandra, Docker and related technologies.

Build, operate, and scale CrowdStrike's global backbone and hybrid cloud networks. Design and implement IP and optical solutions, drive capacity planning, evaluate technologies, automate with IaC and CI/CD, support cloud networking, lead projects from ideation to implementation, and participate in 24x7 on-call rotation.

Provide proactive technical support and account advocacy for Premium Support customers across EMEA. Responsibilities include customer onboarding, platform training, health checks, technical issue resolution, escalations, knowledge sharing, renewal-risk mitigation, and expansion support. The role partners with internal technical and sales teams, serves customers from SOC staff to executives, and requires fluent English and Hebrew, Windows Server experience, cybersecurity knowledge, strong communication, and up to 25% travel.

Conduct real-time monitoring, analysis, containment, remediation, malware analysis, and incident response across Windows, macOS, and Linux environments. Develop detection and response processes, communicate findings to customers, mentor junior analysts, provide technical escalation and quality assurance, manage programs or teams, and contribute to security thought leadership and process improvement.

Provides end-to-end technical support for CrowdStrike customers, troubleshooting cloud, Kubernetes, container, Linux, API, and security-platform issues. Resolves cases through multiple channels, documents bugs, creates knowledge-base content, communicates recommendations, and escalates complex issues. Partners with Engineering and internal stakeholders to improve products and customer outcomes. The role also serves as a subject matter expert for a key product feature and supports customers integrating, deploying, and maintaining CrowdStrike services.

The role involves researching cybersecurity threats, vulnerability analysis, developing automated tools, and collaborating with teams to provide technical expertise and publish findings.

Deliver professional services for Falcon Next-Gen SIEM, helping customers implement log management, XDR, and SOAR capabilities. Provide technical guidance, integrations, knowledge transfer, documentation, and trusted advisory support. Collaborate with engineering and product teams to communicate customer requirements and influence product improvements. The role requires SIEM and SOAR experience, cloud platform knowledge, IT security expertise, scripting and automation skills, AI platform experience, and strong communication abilities.

Analyze large-scale security telemetry, threat intelligence, endpoint, and detection data to identify trends, anomalies, and emerging threats. Build dashboards, reports, data pipelines, and KPI frameworks using SQL, Python, LogScale, or similar tools. Collaborate with data engineering, product, and engineering teams to ensure data quality and translate complex findings into actionable insights for technical and non-technical stakeholders.

Provides embedded technical consulting to strategic customers using the CrowdStrike Falcon platform. Responsibilities include Falcon deployment, configuration, troubleshooting, module adoption, integrations, vulnerability and asset management, threat hunting guidance, incident management support, scripting through Falcon APIs, project planning, and customer training. The role requires security platform experience, knowledge of Windows, macOS, and Linux, strong communication skills, and up to 20% travel.

Conduct real-time security monitoring, alert analysis, incident response, malware analysis, and remote remediation across Windows, Mac, and Linux environments. Develop detection and response processes, communicate findings to customers, provide technical escalation and mentorship, oversee analyst quality, manage programs or teams, and contribute to security thought leadership and process improvements.

Monitor and analyze security alerts, investigate and respond to incidents across Windows, macOS, and Linux, perform malware and forensic analysis, remotely remediate threats, and improve detection and response processes. The analyst communicates findings to customers, mentors junior analysts, provides quality oversight, manages teams or programs, serves as a technical escalation point, and contributes to security thought leadership and process development.

Monitor and analyze security alerts, investigate and respond to incidents across Windows, macOS, and Linux, perform malware and forensic analysis, remotely remediate threats, improve detection and response processes, and communicate findings to customers. The role also involves developing security expertise, contributing to public thought leadership, and using AI technologies to improve decision-making and workflows.

Architect and enable cybersecurity solutions for global system integrators and telecommunications partners. Responsibilities include designing Falcon-based security services, driving platform adoption, integrating solutions into managed services, delivering partner training, supporting proofs of concept, guiding technical strategy, and building relationships with technical and sales leaders. The role requires expertise in endpoint, cloud, identity, AI-driven SOC, SIEM/XDR, threat intelligence, incident response, and major cloud platforms, with regular European travel.

Lead customer deployments of platform services from pre-kickoff through closure. Manage project plans, schedules, budgets, resources, risks, documentation, and technical teams. Coordinate with customers, sales, product, support, engineers, and consultants to ensure high-quality delivery. Apply Agile and waterfall methodologies, conduct post-implementation reviews, and use AI technologies to improve workflows and decision-making. Strong SIEM knowledge, particularly in security-focused IT projects, is required.

Monitor and analyze security alerts, handle incidents across Windows, Mac, and Linux, perform malware analysis, and remotely remediate malicious activity. The role also develops detection and response processes, communicates findings and recommendations to customers, contributes to security procedures, and supports thought leadership through public content and speaking engagements.