Security Researcher, Data Ops; Remote

Crowd Strike, Inc.
Full time
R26057

As a global leader in cybersecurity, Crowd Strike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn't changed — we're here to stop breaches, and we've redefined modern security with the world's most advanced AI-native platform. Our customers span all industries, and they count on Crowd Strike to keep their businesses running, their communities safe and their lives moving forward.

We're also a mission-driven company. We cultivate a culture that gives every Crowd Striker both the flexibility and autonomy to own their careers. We're always looking to add talented Crowd Strikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters?

The future of cybersecurity starts with you.

Crowd Strike is looking for a self-starting, responsible, action-oriented, and highly motivated Senior Security Researcher to join our Counter Adversary Operations team. This position will require the candidate to collect and analyze data from the cybercriminal underground that could impact the security and privacy of Crowd Strike customers and their users.

A successful candidate will be an operational security (OPSEC)-savvy, detail-oriented problem solver, and with an interest in data collection and analysis. Highly qualified candidates will have a technical foundation, and experience in cyber threat intelligence.

• Complete technical collections projects including acquisition, monitoring, and analysis of deep and dark web data.
• Collect and ingest data from websites by developing scrapers and scripts to work with APIs and databases.
• Build, deploy, and maintain tools and services with Docker, Git, and automated pipelines.
• Investigate logs to identify and fix code issues, ensuring collection tools can adapt and keep up with an evolving criminal ecosystem.
• Employ secure operational tradecraft methods and practices.
• Conduct proactive research into underground cybercriminal economies and how threat actors are exploiting or abusing emerging technologies.
• Collaborate closely with multiple and various stakeholders of Crowd Strike's global Counter Adversary Operations team.

• Professional experience in cyber threat intelligence, open source intelligence, or information security.
• Proficiency in at least one general-purpose programming language such as Python, and experience with developing tools for data extraction, webscraping, and interacting with databases.
• Familiarity with Docker, Git, and general web technologies including HTTP, HTML, and JavaScript.
• Familiarity or experience with common logging tools like Splunk or Logscale.
• Familiarity with Python and open source tools to scrape, parse, and work with data e.g. pandas, requests, SQL, beautiful soup.
• Ability to interact with RESTful and other types of APIs for both data retrieval and developing new tools.
• Confidence in navigating large datasets and conducting exploratory data analysis using statistical methods to find needles in a haystack.
• Appreciation for Crowd Strike's mission and principles around security, trust and safety, and privacy.
• Practical knowledge of operational security (OPSEC) principles and best practices.
• Ability to work remotely, in a collaborative team environment across different time zones.

• Additional language expertise (Russian, Mandarin, Korean, Spanish, Farsi, Arabic, Japanese, French, Hindi, Urdu or others).
• Prior intelligence community or cyber threat intelligence background.
• Demonstrated engagement in the security community, academic research community, CTFs, or contributing to open source software development.
• Interest or experience in leveraging machine learning, generative AI applications, and LLMs to automate workflows and understand large datasets.
• Undergraduate degree, or equivalent experience, in information security, cybersecurity, computer science, data science, intelligence studies or a related field.
• Other technical security certifications or research background is a plus.