Application Security Engineer, CrowdStrike

Sensor

$160-240k

The base salary range for this position in Canada is $150,000 - $250,000 CAD per year. + Equity + Variable/incentive compensation

Linux

C++

Windows

Mid and Senior level

Remote from Canada, US

AI-native cybersecurity platform

Job no longer available

AI-native cybersecurity platform

1001+ employees

B2BArtificial IntelligenceSecurityEnterpriseDeep TechSaaSCyber SecurityCloud Computing

Job no longer available

$160-240k

The base salary range for this position in Canada is $150,000 - $250,000 CAD per year. + Equity + Variable/incentive compensation

Linux

C++

Windows

Mid and Senior level

Remote from Canada, US

1001+ employees

B2BArtificial IntelligenceSecurityEnterpriseDeep TechSaaSCyber SecurityCloud Computing

Company mission

CrowdStrike is on a mission to stop breaches. Its purpose is to provide safety and security to some of the world’s largest, most influential companies and, by extension, the billions of people around the world who use their services.

Job

Company

Role

Who you are

You like to rip apart Windows, Linux or Mac applications to see how they work and find security flaws
You want to actually play a part in fixing flaws rather than just reporting them and hoping for the best
Experience programming in or assessing security of C/C++ apps for Windows, Linux or Mac
Understanding of system internals and security features for Windows, Linux or Mac
Comfort with concurrency considerations in multi-threaded applications
Understand the security implications of containerization and virtualization
A working understanding of how software products are created and shipped in Agile/DevOps like environments – enough to have a positive working relationship with product engineers (software product development experience is a huge plus, but not a requirement)
A solid understanding of common software weaknesses that impact endpoint and client/server applications; you’ll be hunting for these, you need to know them when you see them and be able to help product engineers understand and fix them
Comfort with collaborating across technical teams: asking technical questions, challenging assumptions, getting or providing context for decisions, etc

Desirable

C/C++ programming/review
Experience with debuggers like Ghidra, IDA Pro, or other similar tools
Experience developing/maintaining automation for application security tasks
Experience developing and using threat models, especially using STRIDE
Application penetration testing experience, especially if it includes testing against install packages and control bypass methods
Reverse-engineering or malware analysis, or related security research capabilities

What the job involves

Our team is growing, and we’re looking for capable security people to dig deep into our endpoint products, find design and implementation flaws, and help our product engineers fix problems and ship secure code
Join project teams working on product improvements and new products as a security expert and advisor, influencing the design and capabilities of our world-class endpoint protection products, with a focus on the endpoint sensors
Create and update threat models to help drive security decisions
Read and review source code for applications, looking for security flaws and vulnerabilities; you’ll have tools to help you but you’ll be digging deeper than tools can
Think like a hacker and attack endpoint applications with kernel components, mostly before they go to production; again, you’ll have tools to help you, but you’ll do more than tools can
Work with developers to help them understand problems, risks, design weaknesses, etc. and figure out good solutions
Build small tools and automation to make your life/your team’s life/developers’ lives easier
Validate and replicate some kinds of bug bounty reports, and hunt for similar issues in affected applications

Our take

Since CrowdStrike was founded by a trio of former McAfee executives in 2011, it’s grown into a thousands-strong, NASDAQ-listed company. With customers including Verizon, Deloitte, and Goldman Sachs, it’s considered one of the world’s top enterprise cybersecurity vendors along with the likes of Cisco, IBM, and Palo Alto Networks.

One of the reasons behind CrowdStrike's continued success is its ability to keep pace with the evolving tech market, for instance with its Generative AI security analyst that leverages recent developments in AI. Although not immune to the slowdown of the global economy, the company's modular design has given it the upper hand, allowing clients to consolidate their security spend with CrowdStrike instead of selecting packages from multiple vendors at a higher overall cost.

With long-term demand for cybersecurity products growing, and its reputation as strong as ever, CrowdStrike shows no signs of slowing down. It has partnered with Ignition Technology to double down on its UK presence, and continues to be a voice in the wider market through its "Falcon Fund" investment vehicle and position as a founding member of NIST's Artificial Intelligence Safety Institute Consortium (AISIC).

Freddie

Company Specialist at Welcome to the Jungle

Insights

Top investors

20% employee growth in 12 months

Glassdoor (4)

Trustpilot (2)

Company

Funding (last 2 of 6 rounds)

Jun 2018

$200m

SERIES E

Oct 2017

$25m

SERIES D

Total funding: $485.9m

Company benefits

Competitive Employee Stock Purchase Plan
Comprehensive Health Benefits
Parental & Fertility Assistance
Remote-first culture
Health & Wellness Programs
Professional Development
Executive Coaching & Mentorship
Offices with stocked kitchens when you need to fuel innovation and collaboration
Competitive vacation and flexible working arrangements
401(k) Plan 🇺🇸

Company HQ

Heritage District, Sunnyvale, CA

Leadership

George Kurtz

(Founder, President & CEO)

Founded security software company Foundstone in 1999, operating as CEO until McAfee's $90m acquisition in 2004. Spent the next seven years at McAfee in a number of executive roles including SVP of Enterprise and CTO.

Share this job