Remote Senior App Security Engineer - Threat Modeling

CrowdStrike, Inc.; Sunnyvale (CA); Remote; USD 160,000 - 250,000; Full time

Benefits offered by this job

Equity awards

Wellness programs

Vacation & holidays

Parental leave

Professional development

Employee networks

Office culture

Great Place to Work Certified

Job summary

CrowdStrike, Inc. in Sunnyvale seeks a Senior Application Security Engineer to secure its AI‑native platform. You will dig into web applications, identify design and implementation flaws, and work with product engineers to ship secure code.

As a security expert, you’ll drive threat modeling, review source code, test API endpoints, and harden systems across cloud and container environments. You’ll develop automation and participate in bug bounty response.

Qualifications

• 10+ years of experience in cybersecurity with hands-on security defect identification.
• Deep understanding of software product lifecycles in Agile/DevOps environments.
• Experience with threat modeling using STRIDE.
• Proven experience in manual secure code review for Go, Python, or JavaScript.
• Expertise in browser security across Chrome/Firefox on desktop and mobile.

Responsibilities

• Join engineering teams as a security advisor, influencing product design and capabilities.
• Create, maintain, and mature threat models to reduce attack surface.
• Review source code for security defects and risks.
• Attack applications throughout the Secure Development LifeCycle.
• Collaborate with developers to remediate defects and design weaknesses.
• Build automation to streamline security tasks and aid engineers.
• Lead bug bounty response and expand security checks across the platform.

Skills

Go

Python

JavaScript

TypeScript

React

Node.js

Threat modeling

API security

Cloud security

Secure SDLC

AI security

Secure code review

Education

Technical security certifications

Tools

SAST

DAST

CSPM

DSPM

ASPM

Job description

CrowdStrike, Inc. in Sunnyvale seeks a Senior Application Security Engineer to secure its AI‑native platform. You will dig into web applications, identify design and implementation flaws, and work with product engineers to ship secure code.

As a security expert, you’ll drive threat modeling, review source code, test API endpoints, and harden systems across cloud and container environments. You’ll develop automation and participate in bug bounty response.