Software Development Engineer - Linux Sensor

Employment Type: Full time

Position Overview

CrowdStrike is a global leader in cybersecurity, protecting the people, processes, and technologies that drive modern organizations. Our mission since 2011 has been to stop breaches, and we have redefined modern security with the world's most advanced AI-native platform. We operate large-scale distributed systems, processing almost 3 trillion events per day, with traffic that is growing daily. Our customers span all industries, and they rely on CrowdStrike to keep their businesses running, their communities safe, and their lives moving forward. We are a mission-driven company cultivating a culture that provides every CrowdStriker with the flexibility and autonomy to own their careers. We are always looking to add talented individuals with limitless passion, a relentless focus on innovation, and a fanatical commitment to our customers, community, and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Product: CrowdStrike Falcon

CrowdStrike Falcon is a two-component security product.

• Sensor: A lightweight agent installed on client environments that observes system activity, recognizes malicious behavior, provides on-box prevention capability, and sends remote telemetry to the Falcon cloud.
• Cloud Component: Aggregates sensor telemetry for each customer's network, correlates malicious behavior across multiple machines, and presents prioritized threat summaries to customer operations teams.

About the Role

This is a Software Development Engineer (SDE) role within the engineering team responsible for delivering the lightweight agent (sensor) on various container-optimized Linux distributions. This role will focus on designing and implementing new features in the sensor to secure cloud workloads, leveraging technologies like eBPF. These features will enhance the Falcon platform's capabilities, providing seamless visibility, detection, and prevention for container processes running in orchestration environments such as Kubernetes.

Responsibilities

• Create and maintain high-performance Linux system software components.
• Analyze complex software features and build effective test strategies and designs.
• Ensure system and component reliability and performance through monitoring, testing, and debugging.
• Debug product issues identified through testing or customer cases to determine root causes and use this input to improve tests.
• Work closely with a team of engineers to support and maintain a culture of high product quality and excellence.
• Collaborate with cross-functional teams to integrate sensor and cloud solutions.
• Work collaboratively with product and release management to control risk, improve quality, and streamline release cycles.
• Participate in code reviews and provide technical guidance to team members.
• Participate in discussions on engineering best practices, including secure coding, testing paradigms, debugging, performance measurement, code reviews, CI/CD, and OS internals, to ensure sensor code is fast and reliable.
• Lead strategic technical initiatives focusing on container and orchestrator security in both public and private clouds.
• Undertake other projects as assigned.

Requirements

• Experience: 5+ years of experience working on product features on Linux or Unix using C/C++.
• Concurrency: Strong experience with multi-threading for high concurrency requirements.
• Reliability: Proven experience with high reliability requirements.
• Low-Level Systems: Detailed understanding of low-level operating system characteristics, including memory usage, efficient performance, and correct conformance to external standards.
• eBPF: Experience developing production eBPF code for security or networking applications.
• Container Technologies: Experience designing and developing container runtime engines, software that monitors containers, or optimized virtual machine environments for running containers.
• Cloud Native Development: Experience programming cloud-native workloads using public cloud platforms and container technologies.