Jobs and Careers

TAC Malware Triage Intern - Summer 2025 (Remote)

United StatesRemotefull_timeVerifiedPosted 8 Jan 2025

💰 $70,000/yr($56,000/yr – $70,000/yr)

About the role

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We’re also a mission-driven company. We cultivate an inclusive culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Our University Recruiting program is dedicated to attracting and cultivating the future leaders of this industry. This program offers paid positions for students and recent grads, designed to provide exposure to work that makes an impact while being supported through a structured experience with seasoned professionals. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role:

This is a highly technical position on a team within the Technical Analysis Cell (TAC), at the forefront of CrowdStrike's mission against nation state and criminal adversaries. The team is tasked with investigating and reverse engineering newly discovered, malicious artifacts and documenting analysis results as a stream of intelligence reporting. We are often the first to analyze previously unknown threats. The team encounters a variety of malicious artifacts and file types; the ability to quickly learn new analysis techniques is crucial for this role. We respond quickly when needed and perform equally well at conducting detailed analysis. Communication and collaboration with other teams of CrowdStrike is highly important to facilitate this.

As a distributed international team, we are looking for an energetic self-starter with the ability to take ownership and be accountable for deliverables while at the same time supporting and helping to improve upon our analysis workflow. If you'd like to work with passionate people in a fast-paced, team-oriented environment, you've come to the right place!

What You’ll Do:

Perform malware analysis.
Continually improve our malware-analysis workflow.
Extract configuration data from malware using in-house tools and manual analysis.
Track relations between new threats and existing actors using in-house tools.
Document threat evolutions and intelligence gaps for the broader Intelligence Team.
Create host-based and network-based signatures suited for large-scale hunting, detection, and tracking of threats.

What You’ll Need:

A rising junior, senior, or graduate-level student currently working towards a Computer Science, Engineering, Cybersecurity degree, graduating between December 2025 - June 2026
Team player: someone who is eager to help, teach, and learn from others
Malware-analysis or knowledge of reverse-engineering principles
Strong problem-solving skills
Ability to express complex technical and non-technical concepts
Ability to learn new analysis techniques quickly, especially when faced with less-common file types
Excellent writing skills
Knowledge of programming and scripting languages, in particular Python

Bonus Points:

In-depth knowledge of Windows and UNIX-based platforms
Experience in binary instrumentation
Experience identifying and classifying malicious tooling through development of signatures that can be used for tracking and hunting purposes
Familiarity with at least a couple of the following tools and languages; IDA, Binary Ninja, Ghidra, WinDbg, x86dbg/x64dbg, C/C++, Rust, Golang, C#, .NET.