Sr. Engineer - Sensor Security Platform (remote)

CrowdStrike CrowdStrike · Enterprise · CA · Remote

CrowdStrike is seeking an engineer to work on their Falcon sensor's foundational detection and response functions. This role focuses on sensor-oriented security capabilities that are reusable across products and modules, underpinning multiple security features. The engineer will understand, modify, and own complex sensor detections and response capabilities, becoming a resource for other developers. Responsibilities include writing code in various languages (including an internally developed DSL), testing, and resolving issues. Experience with C++ and distributed systems is helpful, with bonus points for Linux development, Python, endpoint security, VM runtimes, and endpoint ML.

What you'd actually do

  1. Understand, modify and assume shared ownership of complex and critical sensor detections and response capabilities
  2. Gain expertise in core logic of the falcon sensor, becoming a resource for other developers within Crowdstrike who use (and build on top of) the technologies owned by our team.
  3. Communicate design, constraints, guarantees and other aspects of the system.
  4. Communicate and collaborate with other teams at Crowdstrike, including engineering teams who use our tools; adversary response teams; malware researchers; product and program managers; and others.
  5. Write code in a variety of languages, including internally developed, non-imperative domain-specific languages. (Much, but not all, of the work we need will be written in the in-house language. This language is highly asynchronous and used to write responses to system events such as process creation and network traffic. System programming experience on one or more of macOS, Linux, and Windows is helpful.)
  6. Write unit, functional and integration tests
  7. Diagnose and resolve issues discovered by customers or other engineering teams

Skills

Required

  • System programming experience on one or more of macOS, Linux, and Windows
  • Ability to read and write C++
  • Communicate, collaborate, and work effectively in a distributed team

Nice to have

  • Fluency and expertise in Linux development environments
  • Fluency in writing Python
  • Endpoint security background
  • Experience designing or writing virtual machine runtimes
  • Experience with machine learning on the endpoint

What the JD emphasized

  • Take responsibility for and ownership of their work.
  • Design and implement performant, functionally-correct and well-structured logic.
  • Can understand, maintain, and improve a large existing codebase.
  • Can reason about, describe and communicate the nature of complex, highly-concurrent systems.
  • Can reason about how our endpoint interacts with our cloud, and communicate with cloud development teams for both design and troubleshooting.
  • Ability to read and write C++ (though this is _not_ primarily a C++ position).