Software Engineer - Cloud, Identity Protection (Hybrid, ISR)
CrowdStrikeResponsibilities
- Design and implement real-time detection rules and pipelines over high-throughput Kafka event streams with sub-second detection latency.
- Build a pluggable detection engine and rule framework that converts authentication telemetry into enriched customer-facing alerts.
- Develop machine-learning and behavioral-anomaly models and integrate LLM-based detection reasoning into production flows.
- Translate security research into production-grade detections for Active Directory attacks, credential theft, and lateral movement.
- Own production detections, including observability, latency SLOs, feature-flag-gated customer rollouts, and incident response.
- Develop across Python, Go, and Java in a globally distributed, cloud-native event-streaming architecture.
Requirements
- 6+ years of experience building backend or distributed systems at scale.
- Deep Python expertise, including data structures, algorithms, and distributed systems; Go experience is a strong plus.
- Hands-on experience with event-streaming or message-queue architectures such as Kafka and distributed data processing.
- Experience with relational and document databases including PostgreSQL and MongoDB, plus caching with Redis.
- Bachelor’s or master’s degree in Computer Science or a related engineering discipline.
- Security or detection experience, machine learning for anomaly detection, and applied LLM or GenAI experience are bonuses.
- Proven experience using AI technologies to improve decision-making, workflows, efficiency, and business outcomes.
- Strong leadership presence and ability to work closely with cross-functional teams.
Benefits
- Market-leading compensation and equity awards.
- Comprehensive physical and mental wellness programs.
- Competitive vacation and holidays.
- Paid parental and adoption leave.
- Professional development opportunities for all employees.
- Employee Networks, geographic neighborhood groups, and volunteer opportunities.
- Vibrant office culture with world-class amenities.
- Hybrid position based in the Ramat-Gan, Israel office.
Tech Stack
About CrowdStrike
CrowdStrike (Nasdaq: CRWD), a global cybersecurity leader, has redefined modern security with the world’s most advanced cloud-native platform for protecting critical areas of enterprise risk — endpoints and cloud workloads, identity and data. Powered by the CrowdStrike Security Cloud and world-class AI, the CrowdStrike Falcon® platform leverages real-time indicators of attack, threat intelligence, evolving adversary tradecraft and enriched telemetry from across the enterprise to deliver hyper-accurate detections, automated protection and remediation, elite threat hunting and prioritized observability of vulnerabilities. Purpose-built in the cloud with a single lightweight-agent architecture, the Falcon platform delivers rapid and scalable deployment, superior protection and performance, reduced complexity and immediate time-to-value. CrowdStrike: We stop breaches.