Security Researcher; Remote

As a global leader in cybersecurity, Crowd Strike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily.

Our customers span all industries, and they count on Crowd Strike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. Crowd Strikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation.

We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented Crowd Strikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters?

The future of cybersecurity starts with you.

Crowd Strike is looking for a self-starting, action-oriented, and highly motivated individual to join our Intelligence Team. This position will require the candidate to track and collect information related to hacktivist and/or state-sponsored group tools, tradecraft, and techniques in a wide variety of environments, to include the deep and dark web.

The mission of a Security Researcher (RoW) is to leverage operational tradecraft along with subject matter expertise to identify, develop and maintain unique sources of cyber threat intelligence information and enable threat analysis. It serves as an important support role to ongoing analysis of actors, adversaries, geopolitical developments, and transnational issues, and is instrumental in providing unique insight into finished intelligence products used by Crowd Strike customers and stakeholders.

The successful candidate will be an operational security (OPSEC)-savvy, detail-oriented problem solver, and have substantial experience driving concurrent projects and issues to completion with minimal direction.

Highly qualified candidates will have an excellent technical foundation, especially related to South Asia-based cyber threat actors, be capable of conducting advanced research pertaining to hacktivist and/or state-sponsored activity, will understand threat intelligence, have strong open source (OSINT) research skills, and be comfortable with internal and cross-team collaboration.

• Collect unique, actionable, timely, and relevant information to answer established standing and ad hoc requirements related to South Asia, Latin America, and North Africa-based hacktivist and/or state-sponsored actors.
• Leverage advanced OSINT tradecraft to follow up on leads and identify South Asia, Latin America, and North Africa-based hacktivist and/or state-sponsored threat actors and track them in various online communities.
• Identify current and emerging cyber threats and trends in South Asia, Latin America, North Africa and surrounding regions, including technical information.
• Create consistently clear, highly-contextualized internal reports of collected information in a way that enables robust analysis.
• Collaborate on analytical reports and threat estimates pertaining to South Asia, Latin America, and North Africa hacktivist and/or state-sponsored topics.
• Employ secure operational tradecraft methods and practices.

• Has extensive experience navigating a wide variety of cyber threat actor environments, to include social media, hidden services, and forums.
• Demonstrates a high level of knowledge regarding South Asia-based hacktivist and/or state-sponsored groups.
• Possesses practical knowledge of technical terminology, tools, and tactics employed by South Asia-based hacktivist and/or state-sponsored threat actors.
• Can…