Jobs at CrowdStrike

Lead design, build, and deploy of large-scale data platforms for LLMs, RAG, and agentic AI systems. Hands-on coding, architecting fault-tolerant pipelines, establishing MLOps/DataOps best practices, mentoring engineers, and operationalizing research into production across Exabyte-scale distributed systems.

Leads internal and external compliance audits, assessments, attestations, and certifications across security, privacy, and enterprise frameworks. Develops system integrations and scalable automation to streamline audit and compliance programs. Communicates with internal and external stakeholders, evaluates risks, improves information security processes, and applies AI technologies to enhance workflows and decision-making.

Provides high-level executive support to the SVP of Revenue Operations, including complex calendar management, domestic and international travel coordination, expense management, briefing preparation, meeting support, stakeholder communication, action-item follow-through, onboarding, and process improvement. The role requires exceptional discretion, organization, judgment, communication, and adaptability while supporting a distributed executive leadership environment.

Assesses customer Falcon environments, identifies security-standard misalignment, recommends remediation, and communicates directly with customers. Documents and resolves issues within SLAs, prepares service reports, partners with internal teams, and coordinates troubleshooting. The role requires cybersecurity experience, customer-facing communication, knowledge of Windows, Linux, and macOS, threat detection and incident response expertise, relevant education or experience, and cybersecurity certifications. Government customer requirements may include periodic drug testing and background and fingerprint checks.

Analyzes intrusions and adversary activity using endpoint and security telemetry, communicates findings to customers, conducts active and passive threat hunting, and researches emerging threats. The role also improves detection capabilities, investigates cloud and identity activity, builds tools, and collaborates with cybersecurity teams to protect customer networks from threat actors.

Build and improve the Enterprise AI operating model through AI-enabled processes, operational reporting, knowledge management, stakeholder forums, intake governance, and asset registry oversight. The role translates complex program information into executive narratives, coordinates decision-making, enables cross-functional alignment, and continuously improves planning, prioritization, governance, communication, and execution mechanisms.

Develop and maintain SOAR playbooks, AI-powered workflows, and PowerShell/Python automation for Falcon Complete’s managed detection and response operations. Build security enrichment, remediation, forensic, and SIEM-integrated workflows; parse security data using JSON and regular expressions; maintain scripts with Git; and collaborate with SOC and engineering teams to improve analyst efficiency. The role also supports AI integration, incident response automation, and evaluation of emerging cybersecurity technologies.

Analyzes the exposure management competitive landscape, synthesizes technical and market intelligence, conducts win/loss analysis, supports competitive deals, develops field enablement materials, and recommends product and go-to-market strategies. Partners with Product, Sales, Marketing, Strategy, Investor Relations, and senior leadership to translate complex cybersecurity concepts into actionable guidance and executive insights.

Secure CrowdStrike’s software supply chain and code-hosting environments by assessing GitHub organizations, open-source integrations, repositories, dependencies, and third-party packages. Implement repository guardrails, secret scanning, access controls, and automation; investigate supply-chain threats such as typosquatting and dependency confusion; promote secure coding and open-source compliance; and collaborate with engineering teams on security initiatives.

Conduct AWS cloud threat hunting for global clients using Falcon, threat intelligence, cloud logs, queries, and scripts. Review configurations, identify adversarial activity and unauthorized access risks, develop defensive recommendations, and manage client projects. Communicate findings through technical reports, presentations, and stakeholder briefings, including to CISO-level audiences, regulators, and legal counsel.

Design, build, and operate agentic AI systems end-to-end for Professional Services. Translate stakeholder needs into secure, scalable multi-agent architectures, define performance benchmarks, manage deployments and incident response, advise leadership, mentor teammates, and maintain runbooks and production tooling including on-call responsibilities.

Architects, deploys, and operates CrowdStrike’s data platform infrastructure and services. Responsibilities include administering Airflow and Superset, managing Terraform infrastructure, building CI/CD pipelines, implementing security and access controls, developing DBT data models, cataloging assets in OpenMetadata, writing Python automation, and mentoring engineers. The role requires cloud, container orchestration, SQL, data modeling, compliance, and AI technology expertise, along with eligibility for CJIS clearance.

Lead product marketing strategy and go-to-market execution for Falcon Exposure Management. Develop positioning, messaging, launches, thought leadership, web strategy, and field enablement while partnering with product, sales, marketing, and executive teams. Translate cybersecurity capabilities into customer value and business outcomes, guide market education, analyze buyers and competitors, and strengthen CrowdStrike’s category leadership. The role requires deep exposure management expertise, strong cybersecurity knowledge, exceptional communication skills, and 12–15+ years of relevant experience.

Conduct red team and penetration testing assessments across operating systems, applications, databases, and network infrastructure. Simulate threat actors using the Kill Chain and MITRE ATT&CK Framework, identify vulnerabilities, and communicate findings and recommendations to technical teams and executives. Support information security program improvements, provide crisis-operation guidance, and perform technical operations with an OPSEC mindset. The role also requires security tool expertise, scripting and automation, AI application, and occasional travel.

Deliver strategic cybersecurity advisory engagements, assess and mature security and incident response programs, develop exercise scenarios, and produce reports, presentations, recommendations, and findings for customer management. The role also identifies emerging cybersecurity trends, contributes to thought leadership and methodologies, and supports multiple concurrent projects. Candidates independently perform strategic analysis, communicate effectively with stakeholders, use AI technologies to improve workflows and decisions, and travel to client engagements up to 30%.

Build and maintain cloud cost monitoring, alerting, and optimization tooling. Develop automation, cost allocation/tagging, data pipelines, dashboards, and integrations with billing APIs. Support FinOps processes, implement cost guardrails, troubleshoot cost systems, participate in on-call rotation, and collaborate with senior engineers and product teams to drive cost-efficient infrastructure and reporting.

Monitor emerging vulnerabilities, assess exploitability and business risk, prioritize remediation, and develop vulnerability intelligence frameworks. Implement asset detection and monitoring across cloud and data-center environments, maintain vulnerability management KPIs, communicate security posture to technical and executive stakeholders, use CrowdStrike Falcon capabilities, and build security tooling. The role requires scripting, threat intelligence research, cloud and Linux experience, cross-functional collaboration, and AI-enabled workflow improvements.

Analyze malware, binary files, customer detection tickets, and machine learning detections to improve detection efficacy and reduce false positives. Review product detections, assess binary legitimacy, address internal detection questions, and provide insights to data science teams. The role collaborates with technical account managers, incident response teams, data scientists, and malware researchers. Required capabilities include malware analysis, reverse engineering, Python scripting, binary fundamentals, threat assessment, research methods, operating systems, and AI-assisted workflow improvement.

Build and operate AWS GovCloud data infrastructure across development, preproduction, and production environments. Establish PostgreSQL platforms, infrastructure-as-code with Chef, BI infrastructure, identity integrations, monitoring, observability, CI/CD, and disaster recovery. Support data pipelines, troubleshoot incidents, optimize databases, and ensure FedRAMP and FISMA compliance. Collaborate with security, compliance, DevOps, and data engineering teams while delivering greenfield infrastructure from architecture through production.

Design, implement, optimize, and maintain scalable hybrid multi-cloud Kubernetes platforms operating at massive scale. Integrate open-source technologies, improve platform reliability, provide technical direction, mentor engineers, and participate in on-call support. The role requires expertise managing large Kubernetes clusters, observability tools, Linux environments, public clouds, custom data centers, and AI-enabled workflow improvements.