Senior Product Security Engineer (Cybersecurity)

TL;DR

Senior Product Security Engineer (Cybersecurity): Analyzing and securing complex endpoint protection products with an accent on Linux system internals, C/C++ code review, and threat modeling. Focus on proactively identifying design flaws, collaborating with engineering teams to implement secure solutions, and leveraging AI to streamline security workflows.

Location: Must be based in the USA

Salary: $160,000–$250,000 per year

Company

CrowdStrike is a global leader in cybersecurity, providing an AI-native platform to stop breaches and protect modern organizations.

What you will do

• Act as a security expert and advisor for project teams developing endpoint protection products.
• Create and maintain threat models to guide security-focused design decisions.
• Perform deep-dive source code reviews to identify vulnerabilities and implementation flaws.
• Conduct security research and attack endpoint applications to uncover potential weaknesses before production.
• Collaborate with developers to explain risks and design effective, secure solutions.
• Develop automation tools to enhance application security workflows and efficiency.

Requirements

• 10+ years of experience in engineering, with a strong focus on security.
• Must be based in the USA.
• Proficiency in assessing the security of C/C++ applications for Linux.
• Deep understanding of Linux system internals and security features.
• Experience with concurrency in multi-threaded applications and containerization/virtualization security.
• Proven experience utilizing AI technologies to enhance decision-making and streamline processes.

Nice to have

• Proficiency in Rust and Go programming.
• Experience with debuggers like Ghidra or IDA Pro.
• Background in application penetration testing and reverse engineering.
• Experience with threat modeling frameworks like STRIDE.

Culture & Benefits

• Competitive compensation including equity awards.
• Comprehensive health insurance, 401k, and wellness programs.
• Flexible vacation policy and paid parental/adoption leave.
• Strong focus on professional development and continuous learning.
• Inclusive culture with employee networks and volunteer opportunities.