Jobs at CrowdStrike

Leads CrowdStrike’s enterprise crisis response program, including governance, playbooks, activation processes, exercises, training, readiness, incident command coverage, executive briefings, and after-action improvements. Partners across resilience, security, communications, and customer response functions to coordinate high-impact events. Builds and manages the Response Operations team, supports executives during crises, maintains on-call readiness, and drives corrective actions to closure.

Monitor, investigate, and respond to security detections across endpoint, identity, email, network, and cloud environments. Analyze EDR telemetry, logs, forensic artifacts, malware, Microsoft 365 incidents, and network activity to determine compromise scope and recommend remediation. Communicate findings and response guidance to customers, improve detection and containment processes, and use scripting and AI technologies to support security operations.

Build and maintain automated functional, integration, performance, and load testing frameworks for distributed cloud systems. Develop agentic test-generation workflows, AI evaluation suites, golden datasets, scoring pipelines, and CI quality gates. Test AI reliability, safety, latency, and cost while validating platform integrations and customer-facing features. Analyze scalability, identify bottlenecks, review designs for testability, and advance engineering quality standards.

Develop and maintain high-fidelity SIEM detection rules for CrowdStrike’s managed detection and response platform. Conduct threat research and hunting, analyze emerging adversary tactics, test and deploy detections as code, and participate in code reviews and on-call support. Collaborate on data parsing and normalization, build operational tooling, use AI-assisted workflows, and improve detection automation, triage efficiency, and threat response at scale.

Lead the design and implementation of deterministic and agentic security automation systems for Falcon Complete MDR. Build scalable services, data pipelines, integrations, and workflows that accelerate threat detection, investigation, triage, and response. Collaborate with analysts and engineering stakeholders, improve reliability and monitoring, participate in on-call rotations, mentor engineers, review designs and code, and establish technical standards for AI-powered security operations.

Lead incident response engagements, investigate intrusions and advanced threats, conduct host and network forensics, perform malware analysis, develop remediation plans, and communicate findings to customers, regulators, legal counsel, and executives. The role also involves threat hunting, team leadership, public thought leadership, and occasional travel.

Manages strategic relationships with cybersecurity services retainer customers, helping them improve preparedness and optimize service investments. Responsibilities include customer success planning, account reviews, service scoping, coordination with Sales and Delivery, documentation, account expansion, and program improvement. The role requires cybersecurity services knowledge, incident response awareness, strong project coordination, senior-level relationship management, communication, workload management, and the ability to use AI technologies to improve business outcomes.

Analyzes the exposure management competitive landscape, synthesizes technical and market intelligence, conducts win/loss analysis, supports competitive deals, develops field enablement materials, and recommends product and go-to-market strategies. Partners with Product, Sales, Marketing, Strategy, Investor Relations, and senior leadership to translate complex cybersecurity concepts into actionable guidance and executive insights.

Manage customer onboarding, training, adoption, retention, and growth for the Falcon Shield SaaS security platform. Build trusted relationships with security teams, understand business objectives, create measurable success plans, conduct strategic reviews, demonstrate product value, and advise on SaaS security posture and architecture. Collaborate with Product and R&D teams on customer feedback and feature improvements while using AI technologies to improve workflows and decision-making.