ML Threat Detection Engineer

CrowdStrike; United States; On-site; USD 90,000 - 125,000; Full time

Benefits offered by this job

Health insurance

401k

Paid time off

Professional development

Job summary

CrowdStrike is seeking a Threat Analyst to join our Data Science, ML Operations and Response Team. You will analyze malware and detections by reviewing customer tickets, with a focus on improving detection capability and efficiency through investigation of threats.

The role combines response and proactive work, requiring experience in detections and/or reverse engineering, strong Python skills, and the ability to translate complex threat data into actionable insights for customers.

Qualifications

• Experience with reverse engineering malware or malware operations.
• Knowledge of programming and scripting languages, especially Python.
• Understanding of binary file attributes such as imports/exports and packers.
• Ability to analyze malware and threat detections for customer tickets.
• Familiarity with multiple operating systems.
• Experience applying AI to enhance decision-making and workflows.

Responsibilities

• Analyze detection data to improve machine learning models.
• Reduce false positives in detections.
• Analyze binary files to assess legitimacy.
• Review product detections against company standards.
• Address internal questions about customer threat detections.

Skills

Python

Malware analysis

Reverse engineering

Threat intelligence

Analytical skills

Operating systems familiarity

AI/ML workflow optimization

C/C++/Java/Assembly

Tools

Git

Linux

MacOS

Threat-detection tools

Machine learning platforms

Job description

CrowdStrike is seeking a Threat Analyst to join our Data Science, ML Operations and Response Team. You will analyze malware and detections by reviewing customer tickets, with a focus on improving detection capability and efficiency through investigation of threats.

The role combines response and proactive work, requiring experience in detections and/or reverse engineering, strong Python skills, and the ability to translate complex threat data into actionable insights for customers.