Product Security Engineer, Vulnerability Intelligence
CrowdStrike2 months ago
Base Salary
$120k - $180k/yr
Responsibilities
- Analyze emerging vulnerabilities, exploitability, exposure, and business risk to recommend prioritized remediation strategies.
- Develop data-driven vulnerability prioritization frameworks aligned with business risk tolerance.
- Implement and monitor asset-detection and security-monitoring tools across clouds and data centers.
- Develop vulnerability-management KPIs and communicate security posture to technical and executive stakeholders.
- Use Falcon platform features to improve security posture and provide feedback to product teams.
- Collaborate with engineering, product, and leadership teams to negotiate remediation timelines and communicate risk in business context.
Requirements
- U.S. citizenship or permanent residency and the ability to work solely from U.S. soil.
- 5–7+ years of applicable experience implementing and supporting security systems.
- Ability to research CVEs, assess exploit availability, and use threat intelligence to evaluate real-world vulnerability impact beyond published severity scores.
- Strong scripting or development capabilities in one or more common scripting languages, such as Python, Golang, Ruby, or Chef.
- Proven experience using AI technologies to improve decision-making, workflows, efficiency, and business outcomes.
- Experience with Linux or other Unix-like variants, cloud platforms such as GCP, and highly concurrent systems.
- Ability to work independently and collaborate across engineering, product, and leadership teams.
- Preferred experience with Kubernetes, containerized applications, developer remediation efforts, the Falcon platform, software supply-chain risks, open-source vulnerabilities, and third-party dependencies.
Benefits
- Market-leading compensation and equity awards, plus bonus eligibility.
- Comprehensive physical and mental wellness programs.
- Competitive vacation and holidays, paid parental and adoption leave, and paid time off.
- Professional development opportunities for employees at all levels and in all roles.
- Employee Networks, geographic neighborhood groups, and volunteer opportunities.
- Vibrant office culture with world-class amenities.
- Health insurance and a 401(k) plan.
- Periodic additional background and fingerprint checks may be required for government customer requirements.
Tech Stack
Categories
About CrowdStrike
CrowdStrike builds the Falcon cloud-native security platform used by enterprises and governments to protect endpoints, cloud workloads, identities, and data with EDR, next-generation antivirus, threat intelligence, and managed threat hunting. Founded in 2011 and publicly traded on NASDAQ as CRWD, the company sells primarily by subscription and also provides incident response services; its systems ingest and analyze nearly 3 trillion security events per day across customer environments.