[Hiring] Product Security Engineer @CrowdStrike

Role Description

Help us protect CrowdStrike and its customers from the most advanced threats! CrowdStrike's Product Security team breaks the mold of traditional internal security and focuses on active threats to CrowdStrike's products. As a Product Security Engineer on the Vulnerability Intelligence team, you will:

• Monitor for emerging vulnerabilities
• Deploy large-scale security/monitoring systems for asset visibility
• Utilize and provide feedback on the Falcon platform's latest features
• Build tooling to solve complex security challenges

What You’ll Do

• Analyze emerging vulnerabilities, assess exploitability and business risk, and recommend prioritized remediation strategies
• Conduct risk-based analysis of vulnerability exposure and develop data-driven prioritization frameworks aligned with business risk tolerance
• Implement and monitor tools for detection and monitoring of assets across multiple clouds and data centers
• Develop and maintain vulnerability management KPIs and communicate security posture to technical and executive stakeholders
• Utilize the latest Falcon features to improve security posture and provide direct feedback to product teams

Qualifications

• U.S. citizenship or Permanent Residency working solely from U.S. soil
• 5-7+ years of applicable experience in a security role implementing and supporting security systems
• Able to thrive in a highly independent work environment
• Ability to research CVEs, assess exploit availability, and leverage threat intelligence to understand real-world vulnerability impact beyond published severity scores
• Strong scripting/development capabilities in one or more common scripting languages, such as Python, Golang, Ruby/Chef, etc.
• Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes
• Proven ability to collaborate across engineering, product, and leadership teams to negotiate remediation timelines and communicate risk in business context
• Experience working with Linux and/or other Unix-like variants, cloud platforms (GCP) and highly concurrent systems

Bonus Points

• Experience with Kubernetes and containerized applications
• Experience working with developers on security vulnerability impact and remediation efforts
• Hands-on experience with the Falcon platform
• Experience assessing software supply chain risks, open source vulnerabilities, and third-party dependencies for risk-based prioritization decisions

Requirements

• This role will require the candidate to periodically undergo and pass additional background and fingerprint check(s) consistent with government customer requirements

Benefits

• Market leader in compensation and equity awards
• Comprehensive physical and mental wellness programs
• Competitive vacation and holidays for recharge
• Paid parental and adoption leaves
• Professional development opportunities for all employees regardless of level or role
• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
• Vibrant office culture with world class amenities
• Great Place to Work Certified™ across the globe