[Remote] Product Security Engineer, Application Security (Remote)

Note: The job is a remote job and is open to candidates in USA. CrowdStrike is a global leader in cybersecurity, dedicated to stopping breaches with advanced AI-native technology. The Product Security Engineer will focus on securing applications by identifying and addressing security flaws, collaborating with engineering teams, and enhancing the security of CrowdStrike’s products.

Responsibilities

• Join engineering teams working on applications as a security expert and advisor, influencing the design and capabilities of our products
• Create and maintain threat models to drive security decisions and minimize threat surface area
• Review application source code, looking for security defects and risk
• Attack applications throughout the Secure Development LifeCycle
• Work with developers to help them understand defects, risks, design weaknesses, etc. and implement proven solutions
• Build integrated tools and automation to make life easier for you, your team, and our engineering partners
• Assist in responding to our bug bounty program, hunt for similar issues, and improve the security of our applications

Skills

• A moderate understanding of how software products are created and shipped in Agile/DevOps like environments
• Moderate experience with threat modeling, especially using STRIDE
• Code review experience for apps built with Go (Golang), Python, or Java
• Knowledge of secure configuration of cloud-native and containerized apps in one or more Cloud environments (GCP, Azure, AWS)
• Experience using and/or maintaining commercially available AppSec tools like SAST, DAST, CSPM, DSPM, and ASPM suites
• An understanding of common software weaknesses that impact cloud and web applications (not just the OWASP Top 10) and experience in application penetration testing
• Comfort with collaborating across technical teams: asking technical questions, challenging assumptions, getting or providing context for decisions, etc
• Experience with driving ambiguous research projects
• Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes
• Self-motivated to identify security problems and engage with teams to find solutions
• Demonstrable experience developing/maintaining automation for application security tasks and defect identification
• Example(s) of having a positive working relationship with product engineers (software product development experience is a huge bonus)
• Knowledge of Docker and Kubernetes (k8s)
• Can explain and demonstrate the limitations of AI assisted development and associated security implications
• Engaged in providing security enhancements to open source projects
• Experience with threat intelligence driven testing and adversarial emulation

Benefits

• Comprehensive physical and mental wellness programs
• Competitive vacation and holidays for recharge
• Paid parental and adoption leaves
• Professional development opportunities for all employees regardless of level or role
• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
• Vibrant office culture with world class amenities
• Great Place to Work Certified™ across the globe
• Eligibility for bonuses
• Equity grants
• A comprehensive benefits package that includes health insurance
• 401k
• Paid time off

Company Overview