Job Description

Employment Type: Full time

Position Overview

CrowdStrike is a global leader in cybersecurity, protecting the people, processes, and technologies that drive modern organizations. Since 2011, our mission has been to stop breaches, and we have redefined modern security with the world's most advanced AI-native platform. We work on large-scale distributed systems, processing almost 3 trillion events per day, with this traffic growing daily. Our customers span all industries, and they rely on CrowdStrike to keep their businesses running, their communities safe, and their lives moving forward. We are a mission-driven company that cultivates a culture providing every CrowdStriker with the flexibility and autonomy to own their careers. We are always looking to add talented CrowdStrikers to the team who possess limitless passion, a relentless focus on innovation, and a fanatical commitment to our customers, our community, and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role

CrowdStrike's Sensor Security Platform (SSP) team is hiring an engineer to work on the Falcon sensor’s foundational detection and response functions. The SSP team's mission exists at the intersection of three broad Crowdstrike missions:

• Sensor Mission: Whereas there may exist a holistic, end-to-end security platform that spans all of sensor and cloud; the SSP org specifically focuses on sensor-oriented mission, consisting of technology implemented entirely (or primarily) on the Crowdstrike endpoint agent known as the Falcon Sensor.
• Security Mission: Whereas the Falcon Sensor may behave as a generic endpoint agent that can satisfy many and arbitrary business use cases; the SSP org specifically focuses on security-oriented capability, consisting of technology that directly supports the company-wide mission of stopping breaches.
• Platform Mission: Whereas the Crowdstrike platform offers numerous, distinct products and modules; the SSP org specifically focuses on platform-oriented mission, consisting of technology that is reusable across products and modules and that underpins multiple security features and use cases.

Some named components and technologies within the SSP technology portfolio include the Sensor Detections Pipelines, Sensor Detection Templates, Sensor Remediations Engine, Endpoint User Security, as well as Sensor Antitampering.

This role is targeting candidates who would work across a number of the existing SSP technologies as well as build out new and future capabilities.

What You’ll Do

• Understand, modify, and assume shared ownership of complex and critical sensor detections and response capabilities.
• Gain expertise in the core logic of the Falcon sensor, becoming a resource for other developers within Crowdstrike who use (and build on top of) the technologies owned by our team.
• Communicate design, constraints, guarantees, and other aspects of the system.
• Communicate and collaborate with other teams at Crowdstrike, including engineering teams who use our tools; adversary response teams; malware researchers; product and program managers; and others.
• Write code in a variety of languages, including internally developed, non-imperative domain-specific languages. (Much, but not all, of the work we need will be written in the in-house language. This language is highly asynchronous and used to write responses to system events such as process creation and network traffic. System programming experience on one or more of macOS, Linux, and Windows is helpful.)
• Write unit, functional, and integration tests.
• Diagnose and resolve issues discovered by customers or other engineering teams.

What You’ll Need

• Take responsibility for and ownership of their work.
• Design and implement performant, functionally-correct, and well-structured logic.
• Can understand, maintain, and improve a large existing codebase.
• Can reason about, describe, and communicate the nature of complex, highly-concurrent systems.
• Can reason about