Threat Researcher II (Remote, IRE)
As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.
About the Role
The Threat Analyst joins the Emerging Threats and Security Validation team within the CrowdStrike Malware Research Center (MRC). This team plays a critical role in understanding today's threat landscape, identifying gaps in Falcon's detection capabilities, and helping improve CrowdStrike's protection through threat research, automation, AI, and machine learning.
Working closely with Threat Research, Engineering, Data Science, and Red Team teams, you'll investigate emerging threats, validate detection coverage, and translate technical research into product improvements that better protect our customers. This is an excellent opportunity for someone who enjoys solving complex technical problems while making a direct impact on our products.
What You'll Do:
Research and analyse emerging malware and cyber threats to understand how they impact our customers.
Investigate malware across the full attack lifecycle (adversary kill chain) to ensure Falcon detects and stops threats at every stage.
Distinguish genuine threats from background noise by analysing data from multiple internal and external sources.
Validate and improve CrowdStrike's detection capabilities by identifying gaps and working with engineering teams to strengthen our protections.
Support external security testing and certification programmes (such as AV-Test, AV-Comparatives, and SE Labs) by analysing test results and helping address any missed detections.
Respond to newly discovered threats by performing technical investigations and recommending the best approach for detection and prevention.
Partner with Threat Research, Engineering, Red Team, and Machine Learning teams to translate research into product improvements.
Help design and improve automation that reduces manual effort and accelerates threat analysis.
Communicate technical findings clearly to engineering and response teams to enable faster and more effective action.
Contribute to the continuous evolution of Falcon by combining malware research, automation, AI, and machine learning to improve customer protection.
What You'll Need:
Bachelor's or Master's degree in Computer Science or a related field.
4+ years of experience in threat research with a focus on malware analysis.
Experience reverse engineering file-based malware, exploits, and other attack techniques. Industry certifications such as GIAC Reverse Engineering Malware (GREM) are desirable.
Strong understanding of disassembly and structured programming principles.
Deep knowledge of at least one major operating system and its internals to support behaviour-based analysis.
Strong understanding of the adversary kill chain and attacker behaviour, with experience applying red team methodologies to validate defensive coverage. Certifications such as Offensive Security Certified Professional (OSCP) are desirable.
Experience collaborating with engineering teams to turn research into production capabilities.
Ability to develop small automation or scripting projects to solve immediate technical challenges.
Experience contributing to public security testing programmes (such as AV-Test, AV-Comparatives, or SE Labs) is a plus.
Experience working with large datasets and tools such as Splunk, Elasticsearch, or Kibana is a plus.
Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.
About the Malware Research Center:
The CrowdStrike Malware Research Center is the core of Falcon’s malware detection and response capabilities. The team has a focus on understanding the threat landscape and sets the target for what Falcon should be identifying and preventing. Additionally, the MRC is responsible for understanding our capabilities, and mapping how well our machine learning and behavioral protection capabilities are doing against those threats. Where there is a gap, the MRC takes action to improve our detection stance, and improve our overall protection story. MRC also performs pathfinding research to enable technology development using innovation, prototyping and bleeding edge machine learning to support our flagship Falcon product. There are many parts of CrowdStrike working towards protecting customer environments, and the MRC works across all of them to ensure we are on target and providing the best protection for our current Threat landscape.
Emerging Threats and Security Validation Team:
Leading the charge for understanding the activity of malware today is the Emerging Threats and Security Validation team. With a focus on malware research, the primary role of the team is to understand the threats and malware that are affecting our customer’s businesses. The challenge is the enormous scale of malware today and the sheer number of samples required to be addressed, which requires a more creative approach than traditional Anti-Virus research. Using the data amassed from CrowdStrike’s capabilities and products, we take a holistic view of the threat landscape and identify the emerging threats that are likely to affect our business in the short to medium term. Human efforts are bolstered by automation, AI enrichment, and machine learning to protect our customers when they need it most.
#LI-GT1
#LI-JP2
#LI-Remote
Benefits of Working at CrowdStrike:
- Market leader in compensation and equity awards
- Comprehensive physical and mental wellness programs
- Competitive vacation and holidays for recharge
- Paid parental and adoption leaves
- Professional development opportunities for all employees regardless of level or role
- Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
- Vibrant office culture with world class amenities
- Great Place to Work Certified™ across the globe
CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.
CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements.
If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at recruiting@crowdstrike.com for further assistance.