Red Team Offensive Security Engineer (Remote, ROU)

Posted:
8/19/2024, 5:00:00 PM

Experience Level(s):
Mid Level ⋅ Senior

Field(s):
IT & Security

Workplace Type:
Remote

​​#WeAreCrowdStrike and our mission is to stop breaches. As a global leader in cybersecurity, our team changed the game. Since our inception, our market leading cloud-native platform has offered unparalleled protection against the most sophisticated cyberattacks. We’re looking for people with limitless passion, a relentless focus on innovation and a fanatical commitment to the customer to join us in shaping the future of cybersecurity. Consistently recognized as a top workplace, CrowdStrike is committed to cultivating an inclusive, remote-first culture that offers people the autonomy and flexibility to balance the needs of work and life while taking their career to the next level. Interested in working for a company that sets the standard and leads with integrity? Join us on a mission that matters - one team, one fight.

About the Role:

The red team offensive security engineer will work on a team dedicated to performing activities simulating known threat actors, evaluating advanced techniques, researching new techniques to evaluate and improve CrowdStrike’s Falcon platform. They are expected to be able to develop tools, plan, and oversee assessment execution to help engineering teams measure and improve the product.

Malware Research Center

The CrowdStrike Malware Research Center (MRC) is at the core of Falcon’s malware detection and response capabilities. The team focuses on understanding the threat landscape and sets the target for what Falcon should be detecting and preventing. Additionally, the MRC is responsible for understanding our capabilities and mapping how well our machine learning and behavioral protection capabilities are doing against those threats. Where there is a gap, the MRC takes action to improve our detection stance and overall protection story. There are many parts of CrowdStrike working towards protecting customer environments and the MRC works across all of them to ensure we are on target and providing the best protection for the current threat landscape.

What You'll Do:

  • Design, implement, and execute adversarial simulations, technique research, product measurement, reporting, and metrics.

  • Perform tradecraft analysis of malware and offensive security tools.

  • Replicate and implement malware and evasion techniques.

  • Reverse engineer malware to understand its inner workings.

  • Report results, including mitigations strategies, for both management and technical audiences.

  • Must be able to effectively communicate at all levels within CrowdStrike.

  • Work with a diverse team and assist in developing and improving Falcon’s effectiveness.

What You'll Need:

  • Bachelor’s Degree in a technical field or related experience.

  • Minimum 5 years of experience in a Red Team/Penetration Testing activities is highly preferred.

  • Security community participation (conference speaker, tool development contributor) is valued.

  • Comprehensive understanding of the security methodologies, technologies, and best practices.

  • Experience with EDR bypass and tampering.

  • Windows / Linux / Mac operating systems

  • Experience with reverse engineering toolsets (IDA, Ghidra, Binary Ninja, radare2, windbg, gdb, x64dbg, etc.)

  • Experience with Red Teaming (vulnerability/penetration testing/adversary emulation/adversary simulation assessments) and Reverse Engineering (malware analysis, disassembling, software debugging )

  • Experience in one or more high level programming languages (C/C++, Rust, .Net, Go, etc) and low-level programming languages (ASM).

  • Experience in automation and scripting of applications and systems.

  • Experience with MITRE ATT&CK Framework.

  • Experience with operational support for operating systems, applications and networks is preferred.

  • Desirable Certifications: OSCP, GPEN, OSCE, GCIH, GXPN, GREM, OSEP.

 

#LI-JP2
#LI-EV1
#LI-GT1

#LI-Remote

Benefits of Working at CrowdStrike:

  • Remote-first culture

  • Market leader in compensation and equity awards with option to participate in ESPP in eligible countries

  • Competitive vacation and flexible working arrangements

  • Physical and mental wellness programs 

  • Paid parental leave, including adoption 

  • A variety of professional development and mentorship opportunities

  • Access to CrowdStrike University, LinkedIn Learning and Jhanna

  • Offices with stocked kitchens when you need to fuel innovation and collaboration

  • Birthday time-off in your local country

  • Work with people who are passionate in our mission and Great Place to Work certified across the globe

CrowdStrike is proud to be an equal opportunity and affirmative action employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. Our approach to cultivating a diverse, equitable, and inclusive culture is rooted in listening, learning and collective action. By embracing the diversity of our people, we achieve our best work and fuel innovation - generating the best possible outcomes for our customers and the communities they serve.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at [email protected] for further assistance.

CrowdStrike

Website: https://www.crowdstrike.com/

Headquarter Location: Sunnyvale, California, United States

Employee Count: 5001-10000

Year Founded: 2011

IPO Status: Public

Last Funding Type: Post-IPO Equity

Industries: Artificial Intelligence (AI) ⋅ Cloud Data Services ⋅ Cloud Security ⋅ Cyber Security ⋅ Network Security