Platform Threat Hunter (Remote)

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn't changed - we're here to stop breaches, and we've redefined modern security with the world's most advanced AI-native platform. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We're always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About this Role:

As a Platform Threat Hunter, you will help take CrowdStrike's internal threat hunting program to the next level. You will support incident response teams by building, maintaining, and optimizing detections for effective investigation and response to cutting edge threats. Support the incident response lifecycle directly, deep diving into telemetry on intelligence-driven hunts, and work with other teams throughout CrowdStrike to improve the organization's security posture while improving our products.

• Security Platform Engineering
  • Maintain threat hunting infrastructure and tooling as needed
  • Implement automated threat intelligence integrations or hunting enrichments
• Detection Engineering
  • Develop new custom security detections for CrowdStrike's internal environment
  • Implement automated validation of detection quality
  • Support threat hunting needs by developing hunting leads and supporting queries
• Incident Response
  • Contribute to the incident response lifecycle through hunting and deep-dive analysis
  • Provide written and verbal reports to leadership about hunting findings and their impact to CrowdStrike
  • Summarize hunting activities and findings through regular metrics reporting and highlighting wins to key stakeholders
• Program Maturity Development
  • Help take CrowdStrike's internal threat hunting program to the next level
  • Develop plans and strategies for what a world-class hunting program can look like

• 4+ years of Security Operations or Incident Response experience

• MITRE ATT&CK framework , i ncident response processes, threat hunting methodologies and s ecurity data analysis
• Cloud platforms (AWS, Azure, GCP)
• Log aggregation and processing
• Python or Go programming
• SIEM platforms (Splunk, ELK, LogScale)

• SOAR platforms (Phantom, Demisto, Falcon Fusion)
• EDR platforms (Falcon greatly preferred)
• Security automation frameworks (Tines, XSOAR)

• Remote-friendly and flexible work culture
• Market leader in compensation and equity awards
• Comprehensive physical and mental wellness programs
• Competitive vacation and holidays for recharge
• Paid parental and adoption leaves
• Professional development opportunities for all employees regardless of level or role
• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
• Vibrant office culture with world class amenities
• Great Place to Work Certified™ across the globe