Sr. Engineer, Product Abuse - Product Security (Remote)

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We’re also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role:

Product Security seeks a Sr. Security Engineer for our Product Abuse team to protect CrowdStrike's cloud services, Falcon platform, and security products from abuse.  You'll lead efforts to detect, investigate, and mitigate threats through proactive threat hunting, continuous attack surface monitoring, and driving security enhancements across our product portfolio.  You'll collaborate with industry-leading security experts in a fast-paced, mission-driven environment where your work directly strengthens CrowdStrike's security posture against sophisticated adversaries.

What You’ll Do:

• Lead threat hunting operations against emergent threat activity to determine impact and resolution
• Design and implement monitoring solutions to detect anomalies and potential abuse across external-facing services
• Lead technical aspects of incident response, including attack vector analysis, implementing countermeasures, and post-incident review
• Develop automation and purpose-built tooling to streamline detection, mitigation, and reporting processes
• Conduct regular security assessments and testing simulations targeting attack vectors
• Advocate for and drive product security enhancements in the platform
• Implement and refine logging strategies to enhance visibility into potential abuse scenarios
• Contribute to the roadmap and strategic planning for abuse prevention

What You’ll Need:

• Motivated self-starter with 5+ years experience in a cybersecurity engineering or threat intelligence environment, with a significant focus on threat hunting, attack mitigation, and tooling
• Experience with SIEM platforms (LogScale, Splunk) for large-scale threat hunting and detection engineering
• Strong proficiency in at least one programming language for security automation and tool development
• Strong expertise in designing and implementing robust network and cloud security measures, and comprehensive logging and monitoring for threat detection and incident response
• Strong practical experience with AWS security services — particularly as they relate to infrastructure protection and threat detection / continuous monitoring
• Ability to determine when external-facing services are exceeding baselines and correlate with potential attack indicators
• Understanding of technical terminology, tactics, techniques, and procedures employed by threat actors
• Knowledge of the evolving threat landscape to support an understanding of current and future impacts
• Passionate about taking the initiative to identify and develop enrichments and enhanced visibility
• Enthusiasm for collaboration, including working in a team-oriented environment and across functional teams to leverage subject matter expertise
• Exceptional problem-solving abilities with a methodical approach to complex security challenges
• Strong written and verbal communication skills for technical and non-technical audiences
• Self-motivated with the ability to work independently and as part of a collaborative team
• Excellent time management skills and ability to prioritize in high-pressure situations
• Passion for continuous learning and staying current with emerging threats

#LI-SF1

#LI-MF1

#LI-Remote

#HTF

This role will require the candidate to periodically undergo and pass additional background and fingerprint check(s) consistent with government customer requirements.

Benefits of Working at CrowdStrike:

• Remote-friendly and flexible work culture

• Market leader in compensation and equity awards

• Comprehensive physical and mental wellness programs

• Competitive vacation and holidays for recharge