Sr. Engineer II - Sensor Pipelines and Programmability Tools (Remote)

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day. We have 3.44 PB of RAM deployed across our fleet of C* servers - and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We’re also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role:

CrowdStrike's Sensor and Language Tooling (SaLT) team is hiring an engineer to work on malware detection and prevention pipelines on our Falcon sensor. The SaLT team is responsible for a variety of internal tools which enable other teams at CrowdStrike to write security detections. Among the team’s responsibilities are a custom compiler toolchain for our in-house, security-focused domain specific language (DSL), and also core functions of our security detections platform. The SaLT team works closely with a wide range of other teams at CrowdStrike, helping dedicated engineers across the globe solve hard problems.

This role is focused on the CrowdStrike Falcon sensor’s detection pipelines and improving the sensor’s programmability tools.  Our detection and prevention pipelines respond to system events, such as process creation and network traffic, on endpoints running the Falcon sensor.  These pipelines collate and filter security-relevant events and transmit them to CrowdStrike’s cloud.  Our programmability tools allow the sensor’s behavior to be configured dynamically to allow fast response times to threat actors.

CrowdStrike is a remote-first company with offices and developers worldwide. Remote candidates living in the US and Canada are encouraged to apply. Candidates from the UK, EU or Australia are also very welcome to apply, but should know that coordination with US-based teams will be necessary and flexible working hours will be required. For those that prefer office life, CrowdStrike has engineering offices in Irvine (CA), Kirkland (WA), Minneapolis (MN), Sunnyvale (CA), London (UK) and Crystal City (VA). Occasional travel (<10%) is required.

CrowdStrike is a computer security company, but we do not require candidates for this role to have prior security industry experience. We will mentor and train in security topics as needed. We do expect a strong interest in CrowdStrike's mission and a willingness to grow.

What You’ll Do:

• Understand, modify and assume shared ownership of complex and critical sensor event and data processing pipeline logic - for the purposes of expanding and maintaining the systems as well as guiding future direction.

• Gain expertise in core logic of the falcon sensor, becoming a resource for other developers within Crowdstrike who use our team’s tools.

• Communicate design, constraints, guarantees and other aspects of the system.

• Communicate and collaborate with other teams at Crowdstrike, including engineering  teams who use our tools; adversary response teams; malware researchers; product and program managers; and others.

• Write code in a variety of languages, including internally developed, non-imperative domain-specific languages.  (Much, but not all, of the work we need will be written in the in house language for which our team owns the compiler.  This language is highly asynchronous and used to write responses to system events such as process creation and network traffic.  System programming experience on one or more of macOS, Linux, and Windows is helpful.)

• Write unit, functional and integration tests

• Diagnose and resolve issues discovered by customers or other engineering teams

• Work with language and compiler developers at CrowdStrike to help set direction and prioritize feature development

What You’ll Need:

• Take responsibility for and ownership of their work.

• Design and implement performant, functionally-correct and well-structured logic.

• Can understand, ma