Jobs at CrowdStrike

Build and operate scalable security tooling, applications, APIs, and automation for CrowdStrike’s global multi-cloud Product Security environment. Responsibilities include software supply chain security, AI-powered vulnerability discovery, platform visibility, risk assessments, CI/CD, SRE operations, datastore management, monitoring, and incident response support. The role partners across Product Security to define tooling strategy and maintain mission-critical security services.

Design, build, and maintain distributed cloud services to support advanced threat detection. Collaborate with security, data science, and engineering teams to integrate capabilities into the Falcon platform, ensure production reliability, and leverage AI/LLMs to improve detection and automation. Mentor peers and contribute to scalable, high-availability system architecture.

Lead tailored threat hunting and intelligence operations for high-profile customers: execute sophisticated hunts, research dark web and threat activity, deliver executive and technical briefings, respond to ad hoc customer requests, and leverage AI/autonomous agents to accelerate analysis and outcomes while supporting on-call rotation and cross-team initiatives.

Conduct AWS cloud threat hunting for global clients using Falcon, threat intelligence, cloud logs, queries, and scripts. Review configurations, identify adversarial activity and unauthorized access risks, develop defensive recommendations, and manage client projects. Communicate findings through technical reports, presentations, and stakeholder briefings, including to CISO-level audiences, regulators, and legal counsel.

Design, build, and operate agentic AI systems end-to-end for Professional Services. Translate stakeholder needs into secure, scalable multi-agent architectures, define performance benchmarks, manage deployments and incident response, advise leadership, mentor teammates, and maintain runbooks and production tooling including on-call responsibilities.

Architects, deploys, and operates CrowdStrike’s data platform infrastructure and services. Responsibilities include administering Airflow and Superset, managing Terraform infrastructure, building CI/CD pipelines, implementing security and access controls, developing DBT data models, cataloging assets in OpenMetadata, writing Python automation, and mentoring engineers. The role requires cloud, container orchestration, SQL, data modeling, compliance, and AI technology expertise, along with eligibility for CJIS clearance.

Lead product marketing strategy and go-to-market execution for Falcon Exposure Management. Develop positioning, messaging, launches, thought leadership, web strategy, and field enablement while partnering with product, sales, marketing, and executive teams. Translate cybersecurity capabilities into customer value and business outcomes, guide market education, analyze buyers and competitors, and strengthen CrowdStrike’s category leadership. The role requires deep exposure management expertise, strong cybersecurity knowledge, exceptional communication skills, and 12–15+ years of relevant experience.

Lead program management for CrowdStrike’s Office of Adversary Strategy, coordinating complex cross-functional projects from scoping through delivery. Responsibilities include managing schedules, dependencies, risks, metrics, communications, change management, process improvements, and escalations. The role partners with technical teams and leadership, applies Agile project management practices, coaches teams through obstacles, and uses AI technologies to improve decision-making, workflows, and business outcomes.

Design and scale technical enablement learning programs for sales engineers, partners, and technical sellers. Own curriculum architecture, assessments, labs, workshops, and blended modalities, partner with SMEs, set instructional standards, use feedback and AI tools to measure and improve learning effectiveness.

Conduct red team and penetration testing assessments across operating systems, applications, databases, and network infrastructure. Simulate threat actors using the Kill Chain and MITRE ATT&CK Framework, identify vulnerabilities, and communicate findings and recommendations to technical teams and executives. Support information security program improvements, provide crisis-operation guidance, and perform technical operations with an OPSEC mindset. The role also requires security tool expertise, scripting and automation, AI application, and occasional travel.

Deliver strategic cybersecurity advisory engagements, assess and mature security and incident response programs, develop exercise scenarios, and produce reports, presentations, recommendations, and findings for customer management. The role also identifies emerging cybersecurity trends, contributes to thought leadership and methodologies, and supports multiple concurrent projects. Candidates independently perform strategic analysis, communicate effectively with stakeholders, use AI technologies to improve workflows and decisions, and travel to client engagements up to 30%.

Build and maintain cloud cost monitoring, alerting, and optimization tooling. Develop automation, cost allocation/tagging, data pipelines, dashboards, and integrations with billing APIs. Support FinOps processes, implement cost guardrails, troubleshoot cost systems, participate in on-call rotation, and collaborate with senior engineers and product teams to drive cost-efficient infrastructure and reporting.

Build and scale AI platform infrastructure for internal agents across AWS/GCP. Integrate identity (Okta, OAuth2/OIDC), implement agentic security, containerized deployments (Docker/Kubernetes), CI/CD and Terraform-based pipelines, run vendor evaluations, and design observability/telemetry for LLM-driven workflows while collaborating with security, identity, and engineering teams.

Analyze malware, binary files, customer detection tickets, and machine learning detections to improve detection efficacy and reduce false positives. Review product detections, assess binary legitimacy, address internal detection questions, and provide insights to data science teams. The role collaborates with technical account managers, incident response teams, data scientists, and malware researchers. Required capabilities include malware analysis, reverse engineering, Python scripting, binary fundamentals, threat assessment, research methods, operating systems, and AI-assisted workflow improvement.

Conduct advanced OSINT and operational tradecraft to collect, track, and report on hacktivist and state-sponsored threat actor activity across South Asia, Latin America, and North Africa. Produce contextual internal reports, collaborate on analytical products, and employ secure methods to support threat intelligence operations.

Build and operate AWS GovCloud data infrastructure across development, preproduction, and production environments. Establish PostgreSQL platforms, infrastructure-as-code with Chef, BI infrastructure, identity integrations, monitoring, observability, CI/CD, and disaster recovery. Support data pipelines, troubleshoot incidents, optimize databases, and ensure FedRAMP and FISMA compliance. Collaborate with security, compliance, DevOps, and data engineering teams while delivering greenfield infrastructure from architecture through production.

Design, implement, optimize, and maintain scalable hybrid multi-cloud Kubernetes platforms operating at massive scale. Integrate open-source technologies, improve platform reliability, provide technical direction, mentor engineers, and participate in on-call support. The role requires expertise managing large Kubernetes clusters, observability tools, Linux environments, public clouds, custom data centers, and AI-enabled workflow improvements.

Analyzes the exposure management competitive landscape, synthesizes technical and market intelligence, conducts win/loss analysis, supports competitive deals, develops field enablement materials, and recommends product and go-to-market strategies. Partners with Product, Sales, Marketing, Strategy, Investor Relations, and senior leadership to translate complex cybersecurity concepts into actionable guidance and executive insights.

Leads the global Customer Success organization for Falcon Cloud Security, managing managers and senior contributors while driving adoption, retention, expansion, customer satisfaction, and renewal outcomes. Defines scalable operating and coverage models, develops leaders, sponsors strategic executive relationships, manages escalations and customer risk, partners with Sales, Product, Engineering, and Services, forecasts resources, and uses data, tooling, automation, and AI to improve customer outcomes across complex multi-cloud environments.

Track and analyze PRC-nexus cyber operations, adversary campaigns, tactics, techniques, and procedures using proprietary telemetry, open-source data, and third-party intelligence. Produce strategic and tactical intelligence reports, conduct research, identify intelligence gaps, support customer briefings, review peer reporting, respond to information requests, and contribute to process automation and analytic improvements. The role requires geopolitical knowledge of China and the Indo-Pacific, cyber threat intelligence expertise, and the ability to work independently under deadlines.