Platform Threat Hunter; Remote

As a global leader in cybersecurity, Crowd Strike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. Our customers span all industries, and they count on Crowd Strike to keep their businesses running, their communities safe and their lives moving forward.

We’re also a mission-driven company. We cultivate a culture that gives every Crowd Striker both the flexibility and autonomy to own their careers. We’re always looking to add talented Crowd Strikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters?

The future of cybersecurity starts with you.

As a Platform Threat Hunter, you will help take Crowd Strike’s internal threat hunting program to the next level. You will support incident response teams by building, maintaining, and optimizing detections for effective investigation and response to cutting edge threats. Support the incident response lifecycle directly, deep diving into telemetry on intelligence-driven hunts, and work with other teams throughout Crowd Strike to improve the organization’s security posture while improving our products.

• Security Platform Engineering
  • Maintain threat hunting infrastructure and tooling as needed
  • Implement automated threat intelligence integrations or hunting enrichments
• Detection Engineering
  • Develop new custom security detections for Crowd Strike’s internal environment
  • Implement automated validation of detection quality
  • Support threat hunting needs by developing hunting leads and supporting queries
• Incident Response
  • Contribute to the incident response lifecycle through hunting and deep-dive analysis
  • Provide written and verbal reports to leadership about hunting findings and their impact to Crowd Strike
  • Summarize hunting activities and findings through regular metrics reporting and highlighting wins to key stakeholders
• Program Maturity Development
  • Help take Crowd Strike’s internal threat hunting program to the next level
  • Develop plans and strategies for what a world-class hunting program can look like

• 4+ years of Security Operations or Incident Response experience

• MITRE ATT&CK framework, incident response processes, threat hunting methodologies and security data analysis
• Cloud platforms (AWS, Azure, GCP)
• Log aggregation and processing
• Python or Go programming
• SIEM platforms (Splunk, ELK, Log Scale)

• SOAR platforms (Phantom, Demisto, Falcon Fusion)
• EDR platforms (Falcon greatly preferred)
• Security automation frameworks (Tines, XSOAR)

• Market leader in compensation and equity awards
• Comprehensive physical and mental wellness programs
• Competitive vacation and holidays for recharge
• Paid parental and adoption leaves
• Professional development opportunities for all employees regardless of level or role
• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
• Vibrant office culture with world class amenities
• Great Place to Work Certified™ across the globe

Crowd Strike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.

Crowd Strike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to…