Senior Product Security Engineer, CrowdStrike

Application Security

$135-210k

+ Variable/incentive compensation + equity

AWS

Docker

Kubernetes

GCP

JavaScript

Python

Rust

Azure

Golang

Senior level

Remote from US

AI-native cybersecurity platform

Job no longer available

AI-native cybersecurity platform

1001+ employees

B2BArtificial IntelligenceSecurityEnterpriseDeep TechSaaSCyber SecurityCloud Computing

Job no longer available

$135-210k

+ Variable/incentive compensation + equity

AWS

Docker

Kubernetes

GCP

JavaScript

Python

Rust

Azure

Golang

Senior level

Remote from US

1001+ employees

B2BArtificial IntelligenceSecurityEnterpriseDeep TechSaaSCyber SecurityCloud Computing

Company mission

CrowdStrike is on a mission to stop breaches. Its purpose is to provide safety and security to some of the world’s largest, most influential companies and, by extension, the billions of people around the world who use their services.

Job

Company

Role

Who you are

An understanding of how software products are created and shipped in Agile/DevOps like environments
Basic experience with threat modeling, especially using STRIDE
Some experience in code review for apps built with Go (Golang), Python, Rust, or JavaScript (emphasis on browser-side)
Knowledge of secure configuration of cloud-native and containerized apps in one or more Cloud environments (GCP, Azure, AWS)
Experience using and/or maintaining commercially available AppSec tools like SAST, DAST, IAST, and ASPM suites
An understanding of common software weaknesses that impact cloud and web applications (not just the OWASP Top 10) and experience in application penetration testing
Comfort with collaborating across technical teams: asking technical questions, challenging assumptions, getting or providing context for decisions, etc
Technical security certifications or academic background are a plus

Desirable

Self-motivated to identify security problems and engage with teams to find solutions
Demonstrable experience developing/maintaining automation for application security tasks and defect identification
Example(s) of having a positive working relationship with product engineers (software product development experience is a huge bonus)
Knowledge of Docker and Kubernetes (k8s)
Experience with WebAssembly (WASM)
Engaged in providing security enhancements to open source projects

What the job involves

CrowdStrike’s Product Security team breaks the mold of traditional internal security, and focuses on active threats to CrowdStrike’s products
As an Application Security Engineer you will dig into web applications, find design and implementation flaws, help our product engineers fix defects, and play a role in shipping secure code
You’ll hunt for security defects and play a part in fixing those defects rather than just reporting them and hoping for the best
Additionally, you will be involved in cross-cutting projects to further harden internal systems and processes against active and emerging threats
Join engineering teams working on applications as a security expert and advisor, influencing the design and capabilities of our products
Create and maintain threat models to drive security decisions and minimize threat surface area
Review application source code, looking for security defects and risk
Attack applications throughout the Secure Development LifeCycle
Work with developers to help them understand defects, risks, design weaknesses, etc. and implement proven solutions
Build integrated tools and automation to make life easier for you, your team, and our engineering partners
Assist in responding to our bug bounty program, hunt for similar issues, and improve the security of our applications

Application process

Expected Close Date of Job Posting is: 07-17-2024

Our take

Since CrowdStrike was founded by a trio of former McAfee executives in 2011, it’s grown into a thousands-strong, NASDAQ-listed company. With customers including Verizon, Deloitte, and Goldman Sachs, it’s considered one of the world’s top enterprise cybersecurity vendors along with the likes of Cisco, IBM, and Palo Alto Networks.

One of the reasons behind CrowdStrike's continued success is its ability to keep pace with the evolving tech market, for instance with its Generative AI security analyst that leverages recent developments in AI. Although not immune to the slowdown of the global economy, the company's modular design has given it the upper hand, allowing clients to consolidate their security spend with CrowdStrike instead of selecting packages from multiple vendors at a higher overall cost.

With long-term demand for cybersecurity products growing, and its reputation as strong as ever, CrowdStrike shows no signs of slowing down. It has partnered with Ignition Technology to double down on its UK presence, and continues to be a voice in the wider market through its "Falcon Fund" investment vehicle and position as a founding member of NIST's Artificial Intelligence Safety Institute Consortium (AISIC).

Freddie

Company Specialist at Welcome to the Jungle

Insights

Top investors

20% employee growth in 12 months

Glassdoor (4)

Trustpilot (2)

Company

Funding (last 2 of 6 rounds)

Jun 2018

$200m

SERIES E

Oct 2017

$25m

SERIES D

Total funding: $485.9m

Company benefits

Competitive Employee Stock Purchase Plan
Comprehensive Health Benefits
Parental & Fertility Assistance
Remote-first culture
Health & Wellness Programs
Professional Development
Executive Coaching & Mentorship
Offices with stocked kitchens when you need to fuel innovation and collaboration
Competitive vacation and flexible working arrangements
401(k) Plan

Company HQ

Heritage District, Sunnyvale, CA

Leadership

George Kurtz

(Founder, President & CEO)

Founded security software company Foundstone in 1999, operating as CEO until McAfee's $90m acquisition in 2004. Spent the next seven years at McAfee in a number of executive roles including SVP of Enterprise and CTO.

Share this job