Engineer II - Vulnerability Detection

CrowdStrike Holdings, Inc.; Pune District; On-site; INR 1,800,000 - 3,200,000; Full time

Benefits offered by this job

Market-leading compensation and equity

Wellness programs

Generous vacation and holidays

Parental & adoption leaves

Professional development

Employee networks and volunteering

Vibrant office culture

Great Place to Work Certified

Job summary

CrowdStrike Holdings, Inc. is seeking an OT/IoT security specialist in Pune to join the IOT Security Product Group. You will identify vulnerability data sources, onboard assets, and monitor threat intel to shape platform content for industrial environments.

The role requires 3–7 years in OT/IoT security, Go and scripting proficiency, and experience with OT protocols. You will collaborate with SMEs and customers, leveraging AI to accelerate analysis with human oversight.

Qualifications

• 3–7 years of OT/IoT security or related field experience.
• Proficiency in Go and backend/cloud services.
• Experience with OpenSearch/Elasticsearch and data correlations.

Responsibilities

• Identify and onboard OT/IoT vulnerability data sources for asset visibility.
• Monitor threat intel and disclosures to inform content priorities.
• Handle and troubleshoot customer escalations to improve content quality.
• Maintain a structured device inventory and prioritize expansion.
• Identify bottlenecks and propose content delivery improvements.
• Contribute to KPI development and baseline metrics for pipeline performance.
• Operationalize health checks and quality controls across the content pipeline.
• Track CVEs against inventory and triage findings.
• Engage with customers in POVs and beta programs to improve platform capabilities.
• Collaborate with security SMEs to develop detection content for industrial environments.
• Leverage generative AI for vulnerability analysis while ensuring human oversight.
• Design AI agent workflows to automate multi-step validation with human-in-the-loop.
• Other projects as assigned.

Tools

Wireshark

Zeek

Scapy

Job description

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

IOT Security Product Group

IOT Security Product Group is focussed on developing products and solutions for ISIS/ OT and other IOT verticals like Healthcare. The charter for the team is to use CrowdStrike's platform capabilities and threat intelligence, and build modules and features, integrate with partner products and platforms to establish ourselves as the leading security vendor in this space.

About the Role

This role will have a solid understanding of the IOTICS domain. He/ she will understand the Purdue model, the assets, criticality and the data pertaining to security and its sources to provide accurate asset visibility, vulnerabilities. This involves understanding the domain and systems and software like SCADA servers, HMI, EW, DCS and understanding how adversaries may exploit these resources to advance their modes of interest. This person will be required to identify the data sources, gather the data, analyse the data, identify its criticality, and also automate simple tasks. They will also be responsible for troubleshooting issues with current data and making enhancements.

What You'll Do

• Identify, evaluate, and onboard vulnerability data sources relevant to OT/IoT vendors and devices, assessing reliability, timeliness, and coverage quality.
• Monitor threat intelligence and vulnerability disclosures to inform content prioritization.
• Handling and troubleshooting Customer escalations, to validate content quality and inform product improvements.
• Maintain a structured device inventory and prioritize expansion opportunities based on customer and market needs.
• Identify pipeline bottlenecks and propose process improvements to enhance content quality and delivery.
• Contribute to KPI development and baseline metric tracking for pipeline performance and content coverage.
• Operationalize health checks and quality controls across the vulnerability content pipeline.
• Establish and maintain a cadence for monitoring new CVE disclosures against the supported device inventory, triaging and routing findings appropriately.
• Engage with customers in POVs and beta programs to improve platform capabilities.
• Collaborate with security SMEs to develop detection content focused on adversary activity in industrial environments.
• Leverage generative AI tools to accelerate vulnerability analysis, proof-of-concept development, and detection rule creation while maintaining human oversight for validation and detection accuracy.
• Design and implement AI agent workflows to automate multi-step vulnerability validation processes (e.g., discovery, analysis, prioritization, remediation guidance) while ensuring human-in-the-loop verification for critical vulnerability detections and false positive reduction.
• Other projects as assigned

What You'll Need

• 3–7 years of hands-on experience in OT/IoT security, vulnerability research, or related technical disciplines
• Go (Golang) — Backend/Cloud service development.
• Search Proficiency — Cloud search (OpenSearch/Elastic search), complex queries, aggregations and correlating data across large scale datasets.
• Data Correlation — Stitching heterogeneous telemetry from multiple sources into unified asset records.
• Device / Asset Identification & Fingerprinting — Combine different data sources to accurately fingerprint assets.
• Proficiency with packet analysis tools such as Wireshark, Zeek, or Scapy; experience writing custom dissectors or parsers for OT protocols.
• Experience working in or supporting OT environments, including familiarity with SCADA, DCS, HMI, or other Purdue Model L2/L3 systems and their security considerations.
• Programming/scripting proficiency for automating tasks, data processing, and pipeline tooling.
• Python or Go required; additional languages a plus
• Working knowledge of IoT/ICS/OT network architecture and the unique security challenges of operational environments
• Working knowledge of ISIS/OT protocols such, Modbus, DNP3, ENIP, and similar Curiosity-driven research mindset, able to identify and evaluate relevant threat intelligence, vulnerability disclosures, and adversary activity in the ISIS/OT domain
• Ability to communicate, collaborate, and work effectively in a globally distributed team, customers and partners.

Benefits of Working at CrowdStrike

• Market leader in compensation and equity awards
• Comprehensive physical and mental wellness programs
• Competitive vacation and holidays for recharge
• Paid parental and adoption leaves
• Professional development opportunities for all employees regardless of level or role
• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
• Vibrant office culture with world class amenities
• Great Place to Work Certified across the globe

Equal Opportunity Statement

CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program. CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements.

Contact

If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at [e-mail] for further assistance.

CrowdStrike was founded in 2011 to fix a fundamental problem: The sophisticated attacks that were forcing the world’s leading businesses into the headlines could not be solved with existing malware-based defenses. Founder George Kurtz realized that a brand new approach was needed — one that combines the most advanced endpoint protection with expert intelligence to pinpoint the adversaries perpetrating the attacks, not just the malware. There’s much more to the story of how Falcon has redefined endpoint protection but there’s only one thing to remember about CrowdStrike: We stop breaches.