Sr. Software Engineer, Windows Detections (Remote)

At CrowdStrike we’re on a mission - to stop breaches. Our groundbreaking technology, services delivery, and intelligence gathering together with our innovations in machine learning and behavioral-based detection, allow our customers to not only defend themselves, but do so in a future-proof manner. We’ve earned numerous honors and top rankings for our technology, organization and people – clearly confirming our industry leadership and our special culture driving it. We also offer flexible work arrangements to help our people manage their personal and professional lives in a way that works for them. So if you’re ready to work on unrivaled technology where your desire to be part of a collaborative team is met with a laser-focused mission to stop breaches and protect people globally, let’s talk.

Crowdstrike is looking for a Senior Software Engineer to join our growing Engine and Content Development (ECD) team which focuses on security related endpoint development on Windows, macOS, and Linux.

The Engine and Content Development team is a central part of CrowdStrike’s mission - “We Stop Breaches.' In ECD, we implement strategies and processes that detect suspicious or malicious behavior. Our goal is to automatically stop the bad guys where possible, and to provide useful visibility and guidance to security analysts when new previously unknown adversary activity occurs. We research attacker behavior to understand their tools and techniques, and we build capabilities to detect and prevent malicious activity. Our detection strategies are often performed directly on the endpoint, but are also executed in cloud and may utilize a hybrid strategy combining aspects of both environments. This ability to leverage a variety of tools across the CrowdStrike stack allow us to accomplish our detection goals while balancing local resource utilization and false positives for our customers.

As a sensor engineer within the ECD team you will be focused on the analysis and development of detections for Windows based attack techniques across supported Windows OS versions. You’ll work collaboratively to implement these detections within the Falcon sensor which is a lightweight kernel-level module that observes system activity, recognizes malicious behavior, provides on-box prevention capability, and sends relevant security related data and telemetry to the Falcon cloud. You’ll help develop creative and resourceful ways to detect Windows specific threats while also helping develop cross platform features that cut across core OS subsystems such as analysis of file system, memory, process, and network telemetry. You’ll get exposure to both user-level and kernel-level coding practices. You’ll collaborate with multiple teams within engineering, and will be expected to make significant contributions to the design and implementation of major development projects. We're looking for smart people who want to be challenged and take ownership of what they build.

We are committed to building an inclusive culture of belonging that not only embraces the diversity of our people but also reflects the diversity of the communities in which we work and the customers we serve. We know that the happiest and highest performing teams include people with diverse perspectives and ways of solving problems so we strive to attract and retain talent from all backgrounds and create workplaces where everyone feels empowered to bring their full, authentic selves to work.

CrowdStrike is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law. CrowdStrike participates in the E-Verify program.