HireMO

USA - Remote

USA - Remote, WY

USA - Austin, TX

USA - Arlington, VA

USA - St. Louis, MO

USA - Redmond, WA

USA - Remote, WI

USA - Remote, WV

USA - Remote, VA

USA - San Antonio, TX

USA - Remote, VT

USA - Remote, UT

USA - Remote, TX

USA - Remote, SC

USA - Remote, RI

USA - Remote, OR

USA - Remote, OK

USA - Remote, ND

USA - New York, NY

USA - Remote, NY

USA - Remote, NM

USA - Palo Alto, CA

USA - Remote, NH

USA - Remote, TN

USA - Remote, NE

USA - Remote, MT

USA - Remote, MO

USA - Remote, MS

USA - Remote, MN

USA - Remote, MI

USA - Remote, MD

USA - Remote, SD

USA - Remote, ME

USA - Remote, LA

USA - Remote, KS

USA - Boston, MA

USA - Remote, AK

USA - Remote, KY

USA - Remote, IA

USA - Remote, IN

USA - Remote, ID

USA - Remote, HI

USA - Remote, DC

USA - Remote, FL

USA - Remote, DE

USA - Remote, CT

USA - Remote, CO

USA - Remote, CA

USA - Remote, AR

USA - Remote, AZ

USA - Remote, AL

USA - Remote, AL

USA - Hillsboro, OR

USA - Remote, PA

USA - Remote, NJ

USA - Remote, OH

USA - Las Vegas, NV

USA - Santa Clara, CA

USA - Rancho Cordova, CA

USA - Remote, NC

USA - Remote, GA

USA - Reno, NV

USA - Remote, IL

USA - Remote, MA

USA - Remote, NV

USA - Minneapolis, MN

USA - Bend, OR

Full time

R29549

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn't changed - we're here to stop breaches, and we've redefined modern security with the world's most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We're always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role:

CrowdStrike Intelligence is seeking a motivated security researcher with excellent technical skills to research in-the-wild exploits for all types of vulnerabilities. Our Technical Analysis Cell (TAC) is at the forefront of CrowdStrike's battles with state-sponsored adversaries and criminal actors. We combine world-class intelligence analysis with deep-dive reverse engineering and malicious code analysis, building and using cutting-edge automation systems to deliver actionable indicators and operational insights. This is purely a defensive role on the TAC team that is focused on analyzing, understanding and documenting exploitation techniques that are observed in the wild.

This highly technical position serves an important role in conducting analysis, increasing our coverage of the global threat landscape, contributing to the continuous tracking of criminal and state-sponsored adversary groups, and ultimately developing finished intelligence products. The primary focus is the analysis of in-the-wild exploits as part of our adversary tracking efforts in close collaboration with other subject matter experts on the Intelligence team.

We are ideally looking for a seasoned specialist in vulnerability and exploit analysis to help track the adversary landscape based on intrusion behavior. That said, we are also open to applications by experienced and talented malware analysts or reverse engineers without significant knowledge in this field who are willing to rapidly expand their skills to meet the following requirements:

What You'll Do:

Technical Analysis:

+ Implement tracking systems that inform cross-team adversary tracking efforts based on observed exploitation behavior.

+ Improve and maintain capabilities for detecting exploits, malicious payloads and other potential attack vectors using existing data sources.

+ Identify opportunities for increasing the visibility of threats, specifically exploits, using new data sources.

+ Maintain a detailed understanding of the inner functioning of relevant exploits through reverse engineering.

+ Develop tools to assist with the automation of exploit analysis tasks by extending static and dynamic analysis frameworks.

+ Create a classification framework that aids attribution of intrusion activity based on vulnerabilities used and characteristics in observed exploits.

+ Contribute to active mitigation efforts with technical expertise.

+ Develop host-based and network-based signatures suited for large-scale hunting, detection, and prevention of identified exploits.

Intelligence Reporting:

+ Produce high-quality threat intelligence reporting for all levels of readership, including actionable mitigation and detection guidance.

+ Experience in technical writing.

+ Ability to brief complex technical analysis results to different audiences.

+ Collaborate across teams to inform various functions within CrowdStrike Intelligence and beyond about activity of interest, to coordinate adversary and campaign tracking, and to provide support to teams developing exploit mitigation strategies and products.

+ Conduct briefings as needed for a variety of levels of customers as requested (via either phone, video conference, webcast, in-person briefing, or industry conference)

What You'll Need:

Required:

+ Proficiency in exploitation techniques that are commonly seen in exploits for userspace and kernel-level vulnerabilities.

+ Knowledge of common network service exploitation techniques.

+ Solid understanding of at least two operating system platforms, including Microsoft Windows.

+ Familiarity with standard web-based exploitation vectors.

+ Collaborative mindset, strong team player who enables others.

+ Profound knowledge of reverse engineering tools (disassemblers, decompilers, debuggers) and processes (unpacking malware, reconstructing code logic, etc).

+ Knowledge of programming and scripting languages, in particular Python.

+ Ability to effectively leverage Large Language Models (LLMs) and AI-assisted tools to accelerate vulnerability research, and e...

Apply Externally

Jobs

Sr. Security Researcher (Remote).

Summary

You Need a MO Jobs Account First

Jobs

Jobs

Sr. Security Researcher (Remote).

Summary

Do You Have a MO Jobs Account?

First, Let's Find Your MO Jobs Account

Create an Account to Apply

You Need a MO Jobs Account First

HireMO Terms of Use

1. Acceptance and Changes

2. A No-Cost Public Workforce Service

3. Eligibility, Youth, and Authority

4. Accounts and Security

5. Accuracy Attestation and Program Information

6. Job Seeker Terms

7. Employer Terms

8. Assessments and Matching

9. Artificial Intelligence Features

10. Public Records and Required Notices

11. User Content and Permissions

12. Acceptable Use

13. Intellectual Property and Government Marks

14. Other Users and Third-Party Services

15. Electronic Communications

16. Suspension, Termination, and Records

17. Disclaimers

18. Limitation of Liability and Sovereign Immunity

19. Employer Indemnification

20. Governing Law and General Terms

21. Contact, Accessibility, and Complaints