Senior Application Security Engineer, CrowdStrike
Product Security
$135-210k
+ equity
AI-native cybersecurity platform
Be an early applicant
AI-native cybersecurity platform
1001+ employees
Be an early applicant
$135-210k
+ equity
1001+ employees
Company mission
CrowdStrike is on a mission to stop breaches. Its purpose is to provide safety and security to some of the world’s largest, most influential companies and, by extension, the billions of people around the world who use their services.
Role
Who you are
- Self-motivated to identify security defects and engage with engineering teams to find solutions
- A deep understanding of how software products are created and shipped in Agile/DevOps like environments
- Experience with threat model framework(s), especially using STRIDE
- Proven experience in code review for apps built with Go (Golang), Python, Rust, or JavaScript (emphasis on browser-side)
- A working knowledge of secure configuration of cloud-native and containerized apps in multiple Cloud environments (GCP, Azure, AWS)
- Experience using and/or maintaining commercially available AppSec tools like SAST, DAST, IAST, and ASPM suites
- A solid understanding of common software weaknesses that impact cloud and web applications (not just the OWASP Top 10) and demonstrable experience in application penetration testing
- Examples of collaborating across technical teams: asking technical questions, challenging assumptions, getting or providing context for decisions, etc
- Demonstrable experience developing/maintaining automation for application security tasks and defect identification
Desirable
- Experience working at extremely large scale
- Comfortable with ambiguity and capable of determining direction
- Example(s) of having a positive working relationship with product engineers (software product development experience is a huge bonus)
- Deep knowledge of Docker and Kubernetes (k8s)
- Experience with WebAssembly (WASM)
- Engaged in providing security enhancements to open source projects
- Experience in mentoring, coaching, and/or improving team culture
- Technical security certifications or academic background are a plus
What the job involves
- Help us protect CrowdStrike and its customers from the most advanced threats by securing our applications
- CrowdStrike’s Product Security team breaks the mold of traditional internal security, and focuses on active threats to CrowdStrike’s products
- As an Application Security Engineer you will dig into web applications, find design and implementation flaws, help our product engineers fix defects, and play a role in shipping secure code
- You’ll hunt for security defects and play a part in fixing those defects rather than just reporting them and hoping for the best
- Additionally, you will be involved in cross-cutting projects to further harden internal systems and processes against active and emerging threats
- Join engineering teams working on applications as a security expert and advisor, influencing the design and capabilities of our products
- Create, maintain, and mature threat models to drive security architecture review and eliminate threat surface area
- Review application source code, looking for security defects and risk
- Attack applications throughout the Secure Development LifeCycle
- Work with developers to help them understand defects, risks, design weaknesses, etc. and implement proven solutions
- Build integrated tools and automation to make life easier for you, your team, and our engineering partners
- Drive response efforts to our bug bounty program, hunt for similar issues across the platform, and improve the security of our applications
- We’re hiring this role at multiple levels, so we still want to hear from you even if you think you can’t do all of that – or if you can do more!
Application process
- Expected Close Date of Job Posting is: 02-04-2025
Our take
Since CrowdStrike was founded by a trio of former McAfee executives in 2011, it’s grown into a thousands-strong, NASDAQ-listed company. With customers including Verizon, Deloitte, and Goldman Sachs, it’s considered one of the world’s top enterprise cybersecurity vendors along with the likes of Cisco, IBM, and Palo Alto Networks.
One of the reasons behind CrowdStrike's continued success is its ability to keep pace with the evolving tech market, for instance with its Generative AI security analyst that leverages recent developments in AI. Although not immune to the slowdown of the global economy, the company's modular design has given it the upper hand, allowing clients to consolidate their security spend with CrowdStrike instead of selecting packages from multiple vendors at a higher overall cost.
With long-term demand for cybersecurity products growing, and its reputation as strong as ever, CrowdStrike shows no signs of slowing down. It has partnered with Ignition Technology to double down on its UK presence, and continues to be a voice in the wider market through its "Falcon Fund" investment vehicle and position as a founding member of NIST's Artificial Intelligence Safety Institute Consortium (AISIC).
Freddie
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 6 rounds)
Jun 2018
$200m
SERIES E
Oct 2017
$25m
SERIES D
Total funding: $475.9m
Company benefits
- Competitive Employee Stock Purchase Plan
- Comprehensive Health Benefits
- Parental & Fertility Assistance
- Remote-first culture
- Health & Wellness Programs
- Professional Development
- Executive Coaching & Mentorship
- Offices with stocked kitchens when you need to fuel innovation and collaboration
- Competitive vacation and flexible working arrangements
- 401(k) Plan
Company values
- Automony
- Flexibility
- Trust
Company HQ
Heritage District, Sunnyvale, CA
Articles
Leadership
George Kurtz
(President & CEO)Founded security software company Foundstone in 1999, operating as CEO until McAfee's $90m acquisition in 2004. Spent the next seven years at McAfee in a number of executive roles including SVP of Enterprise and CTO.
Share this job
View 121 more jobs at CrowdStrike