Principal Cloud Security Researcher (AI)

Location: USA - Remote, WY

Base salary: $195,000–$310,000 per year for U.S. candidates, with eligibility for bonuses and equity grants.

Company

CrowdStrike is a cybersecurity company providing an AI-native platform that protects organizations through large-scale distributed systems, threat detection, and response.

What you will do

• Set the technical direction for cloud threat research across control plane, identity, workloads, and Kubernetes on AWS, Azure, and GCP.
• Lead offensive cloud research into attack techniques, privilege escalation, credential access, cross-account and cross-tenant abuse, and identity trust weaknesses.
• Shape agentic red teaming, detection and response, automated remediation, preventive policy, and posture guardrails.
• Translate threat intelligence and offensive research into high-fidelity detections using cloud audit, control-plane, identity, and runtime telemetry.
• Investigate real cloud intrusions, supply-chain campaigns, AI-related cloud risks, and emerging adversary tradecraft with security and incident-response teams.
• Influence product and platform direction, publish research, contribute to community efforts, and mentor cloud researchers and detection engineers.

Requirements

• Extensive experience writing production detection content across multiple platforms or data domains, with deep knowledge of telemetry sources and coverage limitations.
• Ability to reason across endpoint, cloud, identity, SaaS, network, and runtime surfaces and design detections that correlate signals across boundaries.
• Strong knowledge of threat actors, campaigns, and TTPs, with the ability to translate threat intelligence into detection requirements and priorities.
• Experience managing the detection content lifecycle, including library scaling, aging rules, false-positive drift, performance cost, and deprecation decisions.
• Strong communication and influence skills across engineering and leadership stakeholders.
• Experience guiding or mentoring engineers, reviewing detection content, or setting technical standards for detection engineering.
• Proven experience using AI technologies to improve decision-making, workflows, efficiency, and business outcomes.
• Additional background and fingerprint checks may be required for government customer requirements.

Nice to have

• Experience applying AI or LLMs to detection or security operations workflows.
• EDR or SIEM vendor-side product experience.
• MITRE ATT&CK fluency across multiple platforms.
• Published security research, including blogs, conference talks, tools, or CVEs.
• Malware analysis or reverse engineering experience.
• Experience quantifying detection efficacy through precision, recall, or bypass resistance.

Culture & Benefits

• Full-time employment with compensation including base salary, bonuses, equity awards, health insurance, 401(k), and paid time off.
• Comprehensive physical and mental wellness programs, competitive vacation and holidays, and paid parental and adoption leave.
• Professional development opportunities, employee networks, geographic groups, and volunteer opportunities.
• Remote flexibility and a global office culture with workplace amenities.
• Equal employment opportunity and support for veterans and individuals with disabilities.