Sr. Software Engineer, Windows Vulnerability Research

2 weeks ago

NA, United States CrowdStrike, Inc. Full time

About the Role:

CrowdStrike is looking for a Senior Software Engineer to join our growing Content Research & Integration Tactical team within the EndPoint Protection Content group, which focuses on vulnerability research, exploit mitigations, and security-related endpoint development on the Windows operating system.

 

The Endpoint Protection Content group plays a central role in fulfilling CrowdStrike’s mission to Stop Breaches. Within the Content Research & Integration Tactical team (CRI-Tactical), we research the latest common vulnerabilities and exposures (CVEs) to develop tools and techniques that expand sensor visibility and explore ways to detect advanced malicious behavior on customer endpoint devices. Our goal is to enable the sensor to autonomously identify and stop N-day tools, techniques, and procedures where possible, and to provide useful visibility and guidance to security analysts when new previously unknown adversary activity occurs.

 

As a senior software engineer within the CRI Tactical team, you will be focused on the analysis and development of detections for attack techniques across supported Windows OS versions. You’ll work collaboratively to implement detection logic within the Falcon sensor which includes both user-mode and kernel-mode components that together observe system activity, recognize malicious behavior, provide on-box prevention and remediation capabilities, and send relevant security related telemetry to the Falcon Cloud. You’ll help find creative and resourceful ways to detect Windows specific threats while also helping to develop cross-platform features that leverage telemetry from common OS subsystems such as file system, memory, process, and network activity. You’ll get exposure to both user-mode and kernel-mode coding practices.

 

As a Senior Software Engineer, you’ll function as a key resource and subject matter expert for other engineers within the team and across the company.  You’ll collaborate with a wide range of other teams as you drive your own initiatives and assist with other projects. You’ll be expected to make significant contributions from the initial concept phase through design, implementation, release, and bugtail/support. We're looking for smart people who want to be challenged and take ownership of what they build.

 

What You'll Do:

  •  Design and build detection logic and systems leveraged across teams within CrowdStrike to detect cyber attackers and stop breaches.

  •  Extend our existing codebase and test suites utilizing C, C++, Python, and other tools as appropriate.

  • Brainstorm, define, and build collaboratively across multiple teams.

  • Build proof of concept triggers that can exercise common vulnerabilities and exposures

  • Obsess about learning, and champion the newest technologies & tricks with others, raising the technical IQ of the team.

  •  Deliver and accept feedback with grace and courtesy.

  •  Troubleshoot issues within the product when necessary, assisting customer support, test breaks, and release blockers.

  •  Leverage your understanding of engineering best practices, including topics like secure coding, testing paradigms, effective peer code reviews, logging, and resilient architecture patterns, to ensure clean, supportable coding practices.

  •  Be an energetic ‘self-starter’ who is empowered to take ownership and be accountable for deliverables, both individually and when leading a team.

 

What You'll Need:

  •   Post-secondary education in computer science, engineering, or information security OR five (5) years of equivalent experience.

  •  5+ years of experience with any of the following;

    • vulnerability research, analysis, and exploitation techniques,

    • attack surface analysis and risk management, or

    • software instrumentation, testing, and code coverage analysis

  •  Low-level OS knowledge of Windows operating system internals, components, APIs, and design.

  •  Proficiency in multiple programming languages including C, C++, and Python as well as familiarity with multiple processor architectures

  •  Experience in network and packet capture analysis

  •  Knowledge of cyber security practices, challenges, tools, and techniques

  • Team player – able to lead, mentor, communicate, collaborate, and work effectively in a globally distributed team. 

 Preferred Qualifications:

  At least one of the following certifications is preferred:

  •  Offensive Security Certified Professional (OSCP)

  •  Offensive Security Certified Expert (OSCE)

  •  Council of Registered Security Testers (CREST) Registered or Certified Professional certificate

  •  SANS GIAC Penetration Tester, Web Application Penetration Tester, Exploit Researcher and Advanced Penetration Tester

  •  Prior experience working with low-level code, such as OS kernel, firmware or device drivers.  

  • Understanding of kernel-mode and multi-threaded concurrent systems development in any of our supported platforms, with an interest to grow skills in all of them.

  •  Prior penetration testing experience.

  •  Prior experience delivering software via agile processes.

  •  Prior participation in cyber security challenges (e.g. CTFs). 

#LI-Remote

#LI-NT1

#LI-DG1

PandoLogic. Category:Technology, Keywords:Senior Software Engineer, Location:New York, NY-10060

  • Engineering Manager, Windows Sensor

    2 days ago

    N/A, United States CrowdStrike, Inc. Full time

    About the Role:CrowdStrike Falcon is a two-component security product. One component is the “sensor”, installed on endpoint client systems that observes system activity and recognizes malicious behavior, then provides on-box prevention capability and remote telemetry to the Falcon cloud. The cloud component aggregates sensor telemetry for each...

  • Sr. Cloud Threat Detection Engineer

    7 days ago

    N/A, United States CrowdStrike, Inc. Full time

    About the Role:The CrowdStrike Cloud Content team is an integral part of the Content Product Group, tasked with the critical mission of safeguarding cloud environments through innovative detection and response capabilities. This specialized team comprises cloud security experts, researchers, and detection engineers in various time zones working in unison to...

  • Sr. Software Engineer

    4 days ago

    N/A, United States CrowdStrike, Inc. Full time

    About the Role:We’re building the next-generation infrastructure and security platform for CrowdStrike which include an application and service delivery platform, massively scalable distributed data storage and replication systems, and a cutting-edge search and distributed graph system. Help us scale CrowdStrike’s infrastructure and products to handle...

  • General Engineering

    4 days ago

    N/A, United States CrowdStrike, Inc. Full time

    About the Role:CrowdStrike Falcon is a two-component security product. One component is the “sensor”, installed on endpoint client systems that observes system activity and recognizes malicious behavior, then provides on-box prevention capability and remote telemetry to the Falcon cloud. The cloud component aggregates sensor telemetry for each...

  • General Engineering

    4 days ago

    N/A, United States CrowdStrike, Inc. Full time

    About the Role:CrowdStrike Falcon is a two-component security product. One component is the “sensor”, installed on endpoint client systems that observes system activity and recognizes malicious behavior, then provides on-box prevention capability and remote telemetry to the Falcon cloud. The Cloud component aggregates sensor telemetry for each...

  • Finance Technology

    4 weeks ago

    N/A, United States Fannie Mae Full time

    Job Description As a valued colleague on our team, you will act as a team lead in the designing, producing, testing, or implementing software, technology, or processes, as well as lead processes for creating and maintaining IT architecture, large scale data stores, and cloud-based systems. THE IMPACT YOU WILL MAKE The Finance Technology - Software...

  • Principal Software Engineer, Backend

    5 days ago

    N/A, United States CrowdStrike, Inc. Full time

    About the Role:You will be a Principal Engineer within Data Platform, both leading/guiding design and development as well as contributing in a quite hands-on capacity with Spark/Flink data processing and Java/Scala microservices development, owning much of the launch of a new platform which is driving industry-leading innovation on a hyper scale security...

  • Sr. Engineer

    5 days ago

    N/A, N/A, United States CrowdStrike, Inc. Full time

    About the Role:CrowdStrike is hiring for a Sr. Infrastructure Engineer to help take our global metrics and observability platform to the next level. What You'll Do: We are looking for a highly technical, hands-on Engineer with experience using several open source projects commonly found in large scale deployments.  The right candidate will have in depth...

  • Regional Sales Engineer

    2 weeks ago

    N/A, United States CrowdStrike, Inc. Full time

    About the Role: Are you ready for your next real security challenge? Are you passionate about helping organizations stop breaches using a platform that just works? If so, CrowdStrike is seeking a Sales Engineer with significant security expertise. You should be able to articulate how current security solutions are designed and deployed, and why they are...

  • Sr. Technical Writer

    3 days ago

    N/A, United States CrowdStrike, Inc. Full time

    About the Role: As a Senior Technical Writer, you’ll write customer-focused product documentation. You’ll set the example for best practices in user-centered technical writing, and you’ll work with SMEs and managers to develop a deep understanding of complex products and sales processes. Are you a Sr. Technical Writer Candidate?  Are you great at...

  • Sr. Technical Writer

    2 days ago

    N/A, United States CrowdStrike, Inc. Full time

    About the Role:As a Senior Technical Writer, you’ll write customer-focused product documentation. You’ll set the example for best practices in user-centered technical writing, and you’ll work with SMEs and managers to develop a deep understanding of complex products and sales processes. Are you a Sr. Technical Writer Candidate? • Are you great at...

  • Regional Sales Engineer, SLED

    1 week ago

    N/A, United States CrowdStrike, Inc. Full time

    About the Role: Are you ready for your next real security challenge? Are you passionate about helping organizations stop breaches using a platform that just works? If so, CrowdStrike is seeking a Sales Engineer with significant security expertise. You should be able to articulate how current security solutions are designed and deployed, and why they are...

  • Sr. Engineer II

    4 weeks ago

    N/A, United States CrowdStrike, Inc. Full time

    About The Role:You’ll be joining the cloud backend team in the Platform product group responsible for authentication and authorization. The Auth team is responsible for both internal (e.g. Service-to-service authorization, etc.) and external (e.g. user login, etc) authN and authZ. The team is a critical part of our flagship product group supporting the...

  • Sr. Corporate Channel Manager

    1 day ago

    N/A, N/A, United States CrowdStrike, Inc. Full time

    About the Role:CrowdStrike is seeking a Sr. Corporate Channel Manager to support and manage the growth and success of our Corporate Channel business in an aligned region. You will engage with CrowdStrike’s authorized partners to drive leads, and create campaigns for the Sales Managers in your assigned region. You will provide sales enablement and training...

  • Sr. Corporate Channel Manager

    1 day ago

    N/A, N/A, United States CrowdStrike, Inc. Full time

    About the Role:CrowdStrike is seeking a Sr. Corporate Channel Manager to support and manage the growth and success of our Corporate Channel business in an aligned region. You will engage with CrowdStrike’s authorized partners to drive leads, and create campaigns for the Sales Managers in your assigned region. You will provide sales enablement and training...

  • Sr. Technical Writer

    3 days ago

    N/A, United States CrowdStrike, Inc. Full time

    About the Role:As a Senior Technical Writer, you’ll write customer-focused product documentation. You’ll set the example for best practices in user-centered technical writing, and you’ll work with SMEs and managers to develop a deep understanding of complex products and sales processes. Are you a Sr. Technical Writer Candidate? Are you great at...

  • Sr. Tech Sales Instructional Designer

    4 days ago

    N/A, United States CrowdStrike, Inc. Full time

    About the Role: Am I a Sr. Technical Sales Instructional Designer  Candidate? Can you break down complicated topics and figure out how best to help people learn them, constructing a coherent learning story? Are you great at creating slides and written material? Have you created course material in the past that was easily delivered in person, online, and...

  • Sr. Tech Sales Instructional Designer

    3 days ago

    N/A, United States CrowdStrike, Inc. Full time

    About the Role:Am I a Sr. Technical Sales Instructional Designer Candidate? • Can you break down complicated topics and figure out how best to help people learn them, constructing a coherent learning story? • Are you great at creating slides and written material? • Have you created course material in the past that was easily delivered in person,...

  • Regional Sales Engineer, SLED

    1 week ago

    N/A, United States CrowdStrike, Inc. Full time

    About the Role:Are you ready for your next real security challenge? Are you passionate about helping organizations stop breaches using a platform that just works? If so, CrowdStrike is seeking a Sales Engineer with significant security expertise. You should be able to articulate how current security solutions are designed and deployed, and why they are...

  • Regional Sales Engineer, SLED

    2 weeks ago

    N/A, United States CrowdStrike, Inc. Full time

    About the Role:Are you ready for your next real security challenge? Are you passionate about helping organizations stop breaches using a platform that just works? If so, CrowdStrike is seeking a Sales Engineer with significant security expertise. You should be able to articulate how current security solutions are designed and deployed, and why they are...