Linux Threat Detection Engineer

CrowdStrike Holdings, Inc.; Redmond (WA); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Market-leading compensation

Comprehensive wellness programs

Generous vacation & holidays

Paid parental & adoption leaves

Professional development opportunities

Employee networks & volunteer programs

Vibrant office culture

Great Place to Work Certification

Job summary

CrowdStrike Holdings, Inc. is seeking a Linux-focused software engineer to research, develop, and deploy detection techniques on the Falcon endpoint platform. You will work with a nimble team of Linux engineers, often sharing code with Windows and macOS sensors.

The role emphasizes deep Linux internals knowledge, high-performance coding in C/C++, and the ability to deliver enterprise-grade software with robust CI/CD practices and security awareness.

Qualifications

• 3+ years of experience in reverse engineering, threat detection, malware analysis, or on-device development.
• Strong knowledge of Linux OS internals: processes, storage, networking, memory management.
• High-quality C/C++ code with high-concurrency and performance requirements.
• Experience delivering enterprise software with CI, testing, and release management.

Responsibilities

• Design and build detection logic and systems for CrowdStrike Falcon platform.
• Research techniques for detecting malicious activity and perform data analysis.
• Own features from design to delivery, producing production-ready solutions.
• Apply secure coding, testing paradigms, debugging, performance tracing, and OS internals knowledge.
• Collaborate with distributed teams across geographies.
• Respond to and troubleshoot customer product issues.
• Lead and take ownership of individual deliverables.

Skills

Linux kernel

C/C++ development

Threat detection

Team collaboration

Tools

Linux

Job description

CrowdStrike Holdings, Inc. is seeking a Linux-focused software engineer to research, develop, and deploy detection techniques on the Falcon endpoint platform. You will work with a nimble team of Linux engineers, often sharing code with Windows and macOS sensors.

The role emphasizes deep Linux internals knowledge, high-performance coding in C/C++, and the ability to deliver enterprise-grade software with robust CI/CD practices and security awareness.