PhD Intern, Falcon NG-SIEM Search (Aarhus, Denmark)

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn't changed - we're here to stop breaches, and we've redefined modern security with the world's most advanced AI-native platform. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We're always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Our University Recruiting program is dedicated to attracting and cultivating the future leaders of this industry. This program offers paid positions for students and recent grads, designed to provide exposure to work that makes an impact while being supported through a structured experience with seasoned professionals. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role:

Our mission is to make all of our customers' security-relevant data continuously available for automated detection and response, threat hunting, and other Falcon platform use cases. To enable this, the systems behind NG-SIEM are growing to accommodate more than 100 PB of event and action data ingested every day and up to 10 years of retention. This system is critical to CrowdStrike and our customers, so building it to be resilient and highly available is not optional. We are building one of the industry's largest event data and search systems from the ground up.

• Improved Bloom Filters for N-gram Based Block Skipping
• Improved storage format with better compression and faster access
• Enable clustering and outlier function with a distributed streaming algorithms

• Own a research project end to end, from initial experimentation to a working prototype with real production impact
• Work with a team of PhDs and engineers to develop new features and help push the scalability of our LogScale fleets forward
• Contribute to solving real and open problems in large scale search and data storage
• Learn continuously, from your colleagues and from working directly in a large and complex codebase

• Currently enrolled in a PhD program in Computer Science, Software Engineering, or a related field, or expecting to graduate in 2027
• Experience with a JVM-based programming language or similar
• Available for 3 months of full-time work in our Aarhus office
• A genuine interest in distributed systems and how large scale systems behave in production
• You are comfortable working in a large codebase you only partly understand and can make practical tradeoffs between short term delivery and longer term product goals

• Experience programming in Go
• Experience with commercial clouds (AWS, Azure, GCP)

• Market leader in compensation and equity awards
• Paid holidays (including birthday holidays) and 401k matching (where applicable)
• Professional development opportunities including workshops, tech talks, and Executive Speaker Series
• Assigned mentors from across the company for continuous support and feedback
• Participation in companywide initiatives including FalconFIT, Wellness Programs, and Employee Assistance Program
• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
• Vibrant office culture with world class amenities
• Ownership of impactful projects that move the company forward
• Great Place to Work Certified™ across the globe