Sr. Threat Researcher, Adversary Strategy (Remote)

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We’re also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

Malware Research Center

CrowdStrike’s Malware Research Center (MRC) is at the core of Falcon’s malware detection and response capabilities. As an MRC team member, you'll analyze the threat landscape and drive improvements to our machine learning and behavioral protection capabilities. Where there is a gap, MRC takes action to improve our detection stance and protection story. There are many parts of CrowdStrike working towards protecting our customers and MRC works across all of them to ensure we are providing the best protection for the current threat landscape. Help us stop breaches with your expertise.
 

About the Role:

As a member of CrowdStrike’s Adversary Strategy team, you will continuously assess CrowdStrike's threat coverage, provide strategic recommendations for cutting-edge defenses, and ensure we are prepared to aggressively counter against any adversary. You will collaborate cross-functionally to develop remediation strategies and offer expert guidance, empowering CrowdStrike to strengthen our security posture.

What You’ll Do:

• Work across multiple security domains from endpoint to the cloud.

• Understand threat actor tradecraft and how to counter adversaries.

• Analyze security data, threat intelligence, and other information to detect gaps or improvement opportunities in CrowdStrike’s detection capabilities and readiness against adversaries.

• Conduct in-depth research on emerging attack techniques, vulnerabilities, and adversary tactics.

• Collaborate with counterparts across CrowdStrike to improve the platform’s resilience.

What You’ll Need:

• 3+ years of cybersecurity, information security, threat research, threat intelligence, or other relevant experience.

• Python programming experience.

• Experience querying datasets using SQL.

• Knowledge of detection rules such as Yara, Snort, Sigma, or SIEM rule authoring.

• Experience analyzing log sources for threat detection and response.

• Hands-on threat hunting experience.

• Comprehensive understanding of security methodologies, technologies, and best practices.

• Ability to grasp abstract problems and reason about solutions to solve them.

• Excellent analytical, collaboration, communication, and problem-solving skills.

• Knowledge of the threat landscape and MITRE ATT&CK.

• US Citizen or Green Card Holder

Bonus Points:

• GoLang programming experience.

• Understanding of behavioral anomaly detection techniques.

• Understanding of data correlation, graph analysis.

• Experience with cloud logs and intrusion analysis.

• Experience using distributed SQL engines like Athena, Presto, Spark, or Hive.

• Offensive security, cloud, or cyber defense certifications.

• Threat intelligence or threat detection and response experience.

• Data science or machine learning experience.

• Experience with blue teams or SOC.

• Experience in a specific industry or domain (e.g., financial services, healthcare, critical infrastructure)

#LI-Remote
#LI-RC1

Benefits of Working at CrowdStrike:

• Remote-friendly and flexible work culture

• Market leader in compensation and equity awards

• Comprehensive physical and mental we