Sr. Software Engineer - Sensor Detections Platform (Remote)

At CrowdStrike we’re on a mission - to stop breaches. Our groundbreaking technology, services delivery, and intelligence gathering together with our innovations in machine learning and behavioral-based detection, allow our customers to not only defend themselves, but do so in a future-proof manner. Because of that we’ve earned numerous honors and top rankings for our technology, organization and talent. Our culture was purpose-built to be remote first, and we offer flexible work arrangements to help our people manage their personal and professional lives in a way that works for them. If you’re ready to work on unrivaled technology with a team that makes a difference every day, let’s talk.

About the Role:

CrowdStrike's Sensor and Language Tooling (SaLT) team is hiring a senior engineer to work on the detection platform for our Falcon sensor. The SaLT team is a group of developers working together on C++, compilers and core security logic. This role focuses on runtime capabilities, and will work closely with the people who expose those capabilities in domain-specific languages and use those languages to build security products.

CrowdStrike Falcon Host is a two-component security product. One component is a “sensor”: a driver installed on client machines that observes system activity and recognizes malicious behavior, then provides on-box prevention capability and remote telemetry to the Falcon Host cloud. The sensor processes thousands of events per second to provide deep visibility into operations on the endpoint, and performs rich correlation and computation to identify malicious events and blocks malicious activity.

The cloud component aggregates sensor telemetry for each customer’s network, correlates malicious behavior across multiple machines, and presents our customers’ operations teams with a prioritized summary of the threats detected in their environments.

CrowdStrike is a remote-first company with offices and developers around the globe. Remote candidates living in the US and Canada are encouraged to apply. Candidates from the UK, EU or Australia are also very welcome to apply, but should know that coordination with US-based teams will be necessary and flexible working hours will be required. For those that prefer office life, CrowdStrike has engineering offices in Irvine (CA), Kirkland (WA), Minneapolis (MN), Sunnyvale (CA), London (UK) and Crystal City (VA). Occasional travel (<10%) is required once the pandemic is over.

CrowdStrike is a computer security company, but we do not expect candidates for this role to have prior security industry experience. We will mentor and train in security topics as needed. We do expect a strong interest in CrowdStrike's mission and a willingness to grow.

Responsibilities:

• Understand, modify and ultimately assume shared ownership of complex and critical sensor event and detection pipeline logic - for the purposes of expanding and maintaining the systems as well as guiding future direction

• Work with the authors of our internal languages to develop safe and flexible programming models for the sensor runtime

• Support development teams in designing and building software with cross-platform deliverables (Windows, Mac, Linux)

• Mentor junior engineers

• Lead major technology initiatives spanning multiple calendar quarters and involving collaboration across teams and product groups

Qualifications:

• Ability to take ownership of major components of our sensor detections platform, which execute on our sensor runtime in both kernel and user space

• Experience with system level programming in C / C++ on macOS, Windows, or Linux.

• Proficiency with platform-appropriate development and debugging tools.

• Ability to write code with both high performance requirements and reliability requirements

• Experience designing and implementing strong automated test coverage

• Can work effectively on a geographically distributed team

Desirable Experience:

While not required for this position, we will find any of the following particularly attractive in a candidate:

• Strong endpoint security background

• Fluency in Python

• Experience debugging in a kernel or firmware environment.

• Strong background in scalable, light-weight and highly performing systems

• Experience with asynchronous event processing and/or message passing architectures

• Interest in DSLs and custom languages

#LI-Remote

#LI-NT1

#LI-NR1
 

Benefits of Working at CrowdStrike:

• Remote-friendly culture

• Market leader in compensation and equity awards

• Competitive vacation and flexible working arrangements 

• Paid Parental Leave, including adoption 

• Wellness programs

• A variety of professional development and mentorship opportunities

• Open offices have stocked kitchens, coffee, soda and treats

We are committed to building an inclusive culture of belonging that not only embraces the diversity of our people but also reflects the diversity of the communities in which we work and the customers we serve. We know that the happiest and highest performing teams include people with diverse perspectives that encourage new ways of solving problems, so we strive to attract and develop talent from all backgrounds and create workplaces where everyone feels seen, heard and empowered to bring their full, authentic selves to work.

CrowdStrike is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.