Threat Detection Research Engineer (Remote)

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We’re also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Team
The CrowdStrike Malware Research Center (MRC) powers Falcon’s advanced malware detection and response capabilities. Our mission is to deeply understand the threat landscape and ensure Falcon is equipped to prevent and detect evolving adversarial techniques. The team blends deep technical expertise with innovation, conducting research that drives improvements across machine learning, behavioral detection, and protection capabilities. MRC partners across engineering, intelligence, and product teams to strengthen our defenses and advance our leadership in the cybersecurity space.

About the Role:
As a Threat Detection Research Engineer, you will play a hands-on role in identifying, analyzing, and mitigating threats targeting our customers. You’ll work with threat intelligence, behavioral data, and malware samples to assess impact and develop defensive strategies. Your work will support both immediate threat response and the long-term evolution of Falcon’s detection systems.
 

In this role, you'll be expected to reverse engineer malware, understand adversary tradecraft, and produce actionable detection logic. You'll contribute to automation projects that scale threat analysis and provide rapid response capabilities. Collaborating with response and engineering teams, you'll help convert research into scalable detection improvements and practical security outcomes.

What You'll Do:

• Analyze malware and adversary techniques using execution, behavioral analysis, and reverse engineering.

• Validate threats and provide mitigation guidance to improve Falcon’s detection and protection capabilities.

• Reverse engineer malicious code and exploits to extract TTPs and support threat

• attribution and mitigation.

• Communicate technical threat intelligence effectively to cross-functional teams.

• Contribute to the development and prioritization of automation for threat analysis workflows.

• Build small-scale tools or proof-of-concepts to demonstrate detection or mitigation strategies.

• Stay current with threat landscape developments and contribute insights to enhance detection coverage.

What You'll Need:

• 5+ years of experience in threat detection, malware analysis, or security research.

• Proficiency in reverse engineering, disassembly, and behavioral threat analysis.

• Solid understanding of OS internals (Windows, Linux, or macOS) and malware execution behaviors.

• Familiarity with adversary tradecraft, including techniques mapped to the MITRE

• ATT&CK framework.

• Experience scripting or coding in languages such as Python, C/C++, or Go.

• Ability to translate technical threat findings into clear, actionable intelligence.

• Experience collaborating with engineering teams to implement detection or automation enhancements.

• Demonstrated curiosity and drive to innovate in the evolving threat landscape.

#LI-Remote

#LI-AO1

This role will require the candidate to periodically undergo and pass additional background and fingerprint check(s) consistent with government customer requirements.

Benefits of Working at CrowdStrike:

• Remote-friendly and flexible work culture<