Sr. Security Researcher II (Remote, DEU)

Stack

Responsibilities

• ▹Develop automated solutions for collecting, processing and analyzing data at scale (vendor patch processing, identifying exploits in large file collections, browser exploits and malicious infrastructure)
• ▹Perform vulnerability research on a wide variety of targets, analyzing vendor patches to identify vulnerabilities and develop proof-of-concept exploits
• ▹Review evidence of malicious activity (log files, payloads) to confirm exploitation of 0-day and n-day vulnerabilities, identify root causes and reproduce exploits
• ▹Identify new vulnerabilities in applications and products
• ▹Collaborate across CrowdStrike Intelligence and beyond to reproduce emerging vulnerabilities and provide actionable technical information
• ▹Satisfy unique technical collection requirements
• ▹Publish research results on the CrowdStrike blog or at conferences

Requirements

• ▹Proficiency in English, written and spoken
• ▹Strong information security background with 4+ years of experience
• ▹Vulnerability research and exploit development experience
• ▹Ability to leverage GenAI/LLMs effectively for software development and vulnerability research
• ▹Reverse engineering experience
• ▹Solid understanding of Microsoft Windows and Linux operating system internals
• ▹Solid software development experience (Python preferred)
• ▹Excellent problem-solving, creative and analytical skills
• ▹Ability to work independently with a customer-oriented mindset
• ▹Ability to work remotely in a collaborative team environment
• ▹Proven experience using AI technologies to improve decision-making, workflows and efficiency

Nice to have

• ▹Successful participation in CTF competitions
• ▹Experience with mobile platforms and operating systems (e.g. Android, iOS)
• ▹Experience with macOS
• ▹Experience with the Go or Rust programming languages
• ▹Threat Intelligence background

Soft skills

What we offer

• ▹Market-leading compensation and equity awards
• ▹Comprehensive physical and mental wellness programs
• ▹Competitive vacation and holidays
• ▹Paid parental and adoption leave
• ▹Professional development opportunities at every level
• ▹Employee networks, neighborhood groups and volunteer opportunities
• ▹Remote work with flexibility and autonomy

About the company

CrowdStrike is a global cybersecurity leader protecting the people, processes and technologies of modern organizations with its AI-native platform. Since 2011 its mission has been to stop breaches; it works on large-scale distributed systems processing almost 3 trillion events per day.