Director, Internal Threat Intelligence and Detection Engineering (Remote, Eastern & Central)

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We’re also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role:

CrowdStrike is seeking a Director to lead our Internal Threat Intelligence and Detection Engineering (TIDE) organization within CrowdStrike's Corporate Cybersecurity team. This is a pivotal leadership role focused on protecting CrowdStrike's enterprise infrastructure, product environments, and corporate assets from sophisticated nation-state actors, eCrime adversaries, and targeted intrusion campaigns. As the TIDE Director, you will lead elite teams of threat intelligence analysts and detection engineers who serve as our first line of defense in identifying, analyzing, and responding to threats targeting CrowdStrike's internal environments.

The TIDE organization is responsible for developing and maintaining CrowdStrike's internal tactical, strategic, and operational intelligence capabilities, while building and operating sophisticated detection engineering pipelines that enable rapid response to emerging threats. This role presents an extraordinary opportunity to shape the future of threat detection and response for protecting one of the world's leading cybersecurity companies, working with cutting-edge technology and world-class security professionals to defend our enterprise and product environments.

What You'll Do:

• Lead and evolve CrowdStrike's threat intelligence and detection engineering strategies, ensuring alignment with our mission to stop breaches

• Drive operational excellence in intelligence collection, analysis, and detection engineering processes while maintaining the highest standards of quality and efficiency

• Develop and execute the technical roadmap for intelligence-driven detection engineering pipelines and automation frameworks

• Build and mentor high-performing teams across threat intelligence and detection engineering disciplines

• Partner with incident response teams to ensure delivery of actionable intelligence and effective detection capabilities

• Oversee the development and implementation of response playbooks and orchestration frameworks

• Drive strategy and implementation of AI/LLM security controls to protect against emerging AI-based threats and attacks

• Lead initiatives to leverage AI/LLM capabilities for enhanced threat detection while ensuring secure AI operations

• Oversee the development of detection engineering frameworks that incorporate AI-powered analysis and response capabilities

• Collaborate with cross-functional teams to drive innovation in threat detection and response capabilities

• Lead strategic initiatives to stay ahead of evolving threat landscapes and adversarial techniques

What You'll Need:

• 12+ years of experience in cybersecurity, with significant focus on threat intelligence and detection engineering

• 8+ years of leadership experience managing multiple teams and managers in security operations, threat intelligence, or detection engineering roles

• Proven track record of building and scaling threat intelligence programs and detection engineering capabilities

• Deep understanding of adversary tactics, techniques, and procedures (TTPs)

• Strong technical background in security tooling, SIEM technologies, and detection engineering principles

• Experience with modern DevOps practices and automation frameworks

• Understanding of AI/LLM security implications, including prompt injection attacks, model poisoning, and AI supply chain risks

• Experience with security controls and governance frameworks for AI/LLM systems

• Demonstrated abi