Sr. Security Researcher - Cloud Security (Remote, CAN)

CrowdStrike Holdings, Inc.; Ontario; Remote; CAD 130,000 - 210,000; Full time

Job summary

Join a forward-thinking company as a Senior Security Researcher specializing in Cloud Security. This role offers an exciting opportunity to safeguard cloud environments by conducting cutting-edge research and collaborating with cross-functional teams. You will be at the forefront of identifying emerging threats and developing sophisticated security models. This innovative firm values your expertise and provides a remote-first culture, competitive compensation, and a variety of professional development opportunities. If you are passionate about cloud security and want to make a significant impact, this position is for you.

Benefits

Remote-first culture

Competitive vacation

Comprehensive health benefits

Physical and mental wellness programs

Paid parental leave

Professional development opportunities

Offices with stocked kitchens

Qualifications

• 5+ years of experience in security research, focusing on cloud and Linux.
• Proven expertise in cloud platforms and security features.

Responsibilities

• Conduct cloud research to identify trends and vulnerabilities.
• Develop advanced cloud security models and frameworks.

Skills

Security Research

Cloud Infrastructure

Linux Security

Python

Golang

Shell Scripting

Kubernetes

Docker

Podman

Data Analysis

Education

Bachelor's Degree in Computer Science or related field

Tools

AWS

Azure

GCP

Cloud Automation Tools

Job description

Sr. Security Researcher - Cloud Security (Remote, CAN)

Sr. Security Researcher - Cloud Security (Remote, CAN)

Apply

locations: Canada - Remote ON, Canada - Remote NS, Canada - Remote NB, Canada - Remote BC, Canada - Remote AB

time type: Full time

posted on: Posted 30+ Days Ago

job requisition id: R18323

About the Role:

The CrowdStrike Cloud Content team is an integral part of the Content Product Group, tasked with the critical mission of safeguarding cloud environments through innovative detection and response capabilities. This specialized team comprises cloud security experts, researchers, and engineers in various time zones working in unison to ensure our customers’ cloud workloads are secure against the ever-changing threats in the security landscape.

As a senior researcher on the team, you will play a pivotal role in conducting security research and translating it to direct security value for the company and product. This role provides a unique opportunity to join a team with strategic importance to protecting our customers from emerging threats and novel attack methodologies in both cloud and Linux based environments.

What You'll Do:

• Initiate and conduct Cloud Research Initiatives: follow the threat landscape to identify trends in the realm of cloud infrastructure security, threat actors, novel attack approaches, and vulnerabilities in cloud-based and/or cloud-native environments and workloads.
• Conduct cutting edge research in the areas of Linux security and become an authoritative source of knowledge in the team.
• Research threats and vulnerabilities in cloud provider infrastructure and containerized applications and workloads.
• Develop advanced cloud security models: Create sophisticated models and frameworks for identifying and mitigating new types of cloud threats.
• Collaborate with cross functional teams: Work closely with various teams, including engineering, product management, detection engineering, and threat intelligence to drive cloud detections in the CrowdStrike Falcon platform.
• Provide cloud security thought leadership: Share insights and best practices with the broader security community through publications, conference presentations, and technical blogs.

What You'll Need:

• Proven expertise in security research, methodologies, technologies, and tools.
• Minimum of 5 years in security research, preferably Cloud infrastructure and Linux.
• Experience with cloud-native services, infrastructure, and environments.
• Experience with threat research and misconfiguration identification.
• Comprehensive knowledge of cloud platforms (AWS, Azure, GCP) and their security features.
• Python, golang, and shell scripting experience.
• Experience with large scale data analysis.
• Comprehensive knowledge of Kubernetes, docker, podman, and similar containerization and orchestration technologies.
• Familiarity with cloud automation and orchestration tools for optimizing security processes.
• Experience in publishing security research papers and conference talks.
• Experience in malware analysis and reverse engineering.
• Excellent conceptual thinking and communication skills, capable of conveying complex ideas effectively.
• Technical knowledge of network, operating systems (mainly Linux) and data platform security.
• Good problem solving, communication, and teamwork skills.

Benefits of Working at CrowdStrike:

• Remote-first culture.
• Market leader in compensation and equity awards.
• Competitive vacation and flexible working arrangements.
• Comprehensive and inclusive health benefits.
• Physical and mental wellness programs.
• Paid parental leave, including adoption.
• A variety of professional development and mentorship opportunities.
• Offices with stocked kitchens when you need to fuel innovation and collaboration.

CrowdStrike is proud to be an equal opportunity and affirmative action employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

CrowdStrike participates in the E-Verify program.

CrowdStrike Canada ULC is committed to fair and equitable compensation practices. The base salary range for this position in Canada is $130,000 - $210,000 CAD per year + variable/incentive compensation + equity + benefits.

About Us

CrowdStrike was founded in 2011 to fix a fundamental problem: The sophisticated attacks that were forcing the world’s leading businesses into the headlines could not be solved with existing malware-based defenses.