Engineer II, Software Assurance, Product Security (Remote)
CrowdStrike1 day ago
Remote, United StatesMid Level
H1B sponsor
Base Salary
$100k - $145k/yr
Responsibilities
- Assess software supply-chain risk and provide security guidance on open-source usage and repository configurations.
- Implement and maintain controls for GitHub organizations, including repository guardrails, secret scanning, branch protection, and access management.
- Harden open-source code usage, development, ingestion, distribution, and code-hosting environments.
- Investigate open-source dependencies and third-party packages for risks such as typosquatting and dependency confusion.
- Create tooling and automation for security checks and operational efficiency.
- Contribute to security initiatives, secure-coding practices, and cross-team product-security projects.
Requirements
- Experience implementing, supporting, and monitoring software security systems in an engineering role.
- Strong experience with GitHub repository administration, GitHub Actions, branch protection rules, and access management.
- Familiarity with Bitbucket or GitLab and artifact storage tools such as Artifactory and Amazon S3.
- Experience identifying and mitigating open-source risks, including software composition analysis, dependency management, and licensing risks.
- Experience securing Linux or other Unix-like configurations.
- Proficiency in one or more scripting languages such as Python, Golang, Shell, or JavaScript.
- Knowledge of the software development lifecycle, secure coding, code reviews, and source-control security.
- Experience contributing to cross-team security initiatives and using AI technologies for decision-making, workflow automation, or vulnerability triage.
- Strong written communication and the ability to work effectively in a remote environment.
- Preferred experience with LogScale, Splunk, Datadog, Prometheus, Jenkins, Argo CD, and large-scale cloud platforms.
Benefits
- Remote work arrangement.
- Comprehensive physical and mental wellness programs.
- Competitive vacation and holidays, plus paid parental and adoption leave.
- Professional development opportunities for all employees.
- Employee networks, geographic neighborhood groups, and volunteer opportunities.
- Health insurance, 401(k), paid time off, bonuses, and equity grants.
Tech Stack
Categories
About CrowdStrike
CrowdStrike builds the Falcon cloud-native security platform used by enterprises and governments to protect endpoints, cloud workloads, identities, and data with EDR, next-generation antivirus, threat intelligence, and managed threat hunting. Founded in 2011 and publicly traded on NASDAQ as CRWD, the company sells primarily by subscription and also provides incident response services; its systems ingest and analyze nearly 3 trillion security events per day across customer environments.