Threat Researcher II

About CrowdStrike

CrowdStrike stands as a global leader in cybersecurity, dedicated to safeguarding the vital components of modern organizations, including people, processes, and technology. Since its inception in 2011, the company’s mission centers on breach prevention. CrowdStrike has revolutionized security with an AI-native platform that processes nearly 3 trillion events daily, a figure that continues to grow. Serving a diverse set of industries, CrowdStrike ensures the continuity of businesses, safety of communities, and progress of lives. Employees embrace a mission-driven culture, powered by flexibility, autonomy, and a commitment to responsible AI use to innovate and solve complex problems.

Role Overview

The Threat Researcher II joins the Emerging Threats and Security Validation team within CrowdStrike's Malware Research Center (MRC). This team is pivotal in analyzing the current threat landscape, detecting deficiencies in Falcon's protection, and enhancing security through threat research, automation, AI, and machine learning techniques. The role involves cross-team collaboration with Threat Research, Engineering, Data Science, and Red Teams to investigate new threats, verify detection effectiveness, and translate technical findings into improved product protections.

Key Responsibilities

• Examine new malware and cyber threats to evaluate their impact on clients.
• Analyze malware behavior across the full adversary kill chain to assure Falcon’s comprehensive detection capabilities.
• Differentiate authentic threat signals from background noise using data from various internal and external sources.
• Identify detection gaps within CrowdStrike's systems and collaborate with engineering teams to enhance threat protections.
• Support external security testing initiatives such as AV-Test, AV-Comparatives, and SE Labs by reviewing test outcomes and addressing missed detections.
• Conduct technical investigations in response to novel threats, proposing appropriate detection and prevention strategies.
• Work alongside Threat Research, Engineering, Red Team, and Machine Learning groups to convert threat analyses into product enhancements.
• Develop and refine automation tools to reduce manual workloads and expedite threat analysis.
• Effectively communicate technical insights to engineering and response units to improve reaction times and remediation.
• Continuously advance Falcon’s capabilities by integrating malware research with automation, AI, and machine learning to bolster customer defenses.

Qualifications and Experience

• Bachelor’s or Master’s degree in Computer Science or related fields.
• At least 4 years of experience specializing in threat research with a focus on malware analysis.
• Proficient in reverse engineering of file-based malware, exploits, and other attack methods; certifications such as GIAC Reverse Engineering Malware (GREM) are beneficial.
• Thorough understanding of disassembly techniques and structured programming concepts.
• In-depth knowledge of one or more major operating systems and their internals to support behavior-based threat analysis.
• Solid grasp of the adversary kill chain and attacker tactics, with experience applying red team strategies to assess defensive measures; Offensive Security Certified Professional (OSCP) certification is a plus.
• Experience partnering with engineering teams to translate research findings into practical production enhancements.
• Skilled at developing small-scale automation or scripts to tackle immediate technical problems.
• Familiarity with public security testing programs like AV-Test, AV-Comparatives, or SE Labs is advantageous.
• Experience handling large data sets and utilizing tools such as Splunk, Elasticsearch, or Kibana is desirable.
• Demonstrated ability applying AI to improve decision-making, streamline processes, increase efficiency, and drive business results.

About the Malware Research Center

The Malware Research Center is fundamental to Falcon’s malware detection and response capabilities. It focuses on understanding the threat environment, setting the benchmark for detection and prevention, and assessing machine learning and behavioral protection effectiveness. The center actively pursues innovation and prototyping of emerging machine learning technologies to enhance Falcon’s security offerings. Collaboration across CrowdStrike ensures comprehensive protection tailored to the evolving threat landscape.

Emerging Threats and Security Validation Team

This team leads initiatives to comprehend current malware activity and its impact on customers. Its research approach adapts to the vast volume of malware samples, leveraging holistic threat data, automation, AI enrichment, and machine learning to identify and counteract emerging threats promptly.

Benefits

• Industry-leading compensation and equity packages.
• Extensive physical and mental wellness programs.
• Generous vacation and holiday policies for employee recharge.
• Paid parental and adoption leave options.
• Professional development opportunities open to all levels and roles.
• Employee networks, local groups, and volunteer opportunities to foster community engagement.
• Dynamic office culture equipped with top-tier amenities.
• Recognized as a Great Place to Work Certified™ worldwide.

Equal Opportunity Employment

CrowdStrike is committed to diversity and inclusion, valuing every individual’s unique contributions and providing equal employment opportunities free from discrimination based on race, gender, religion, sexual orientation, disability, and other protected characteristics. Assistance options are available for applicants requiring accommodations during the hiring process.