Senior Application Security Engineer - Remote

CrowdStrike, Inc.; California (MO); Remote; USD 160,000 - 250,000; Full time

Benefits offered by this job

Market leading compensation and equity

Wellness programs

Generous vacation and holidays

Parental and adoption leaves

Professional development opportunities

Employee networks and volunteerism

Vibrant office culture

Great Place to Work Certification

Job summary

CrowdStrike, Inc. is seeking a Senior Application Security Engineer to secure CrowdStrike's web applications and products. You will review code, model threats, and work with engineering to fix defects while integrating security throughout the software lifecycle.

You will drive security automation, participate in bug bounty efforts, and expand threat modeling across multiple cloud environments. The role emphasizes collaboration with product teams and strong problem-solving in a fast-paced,

Qualifications

• 10+ years in CyberSecurity focusing on secure development.
• Experience with Agile/DevOps environments.
• Experience with threat modeling STRIDE.
• Manual secure code review for Go, Python, or JavaScript.
• Strong browser security expertise across desktop and mobile.
• Proficient in API endpoint security testing.
• Cloud-native apps across GCP/AWS/Azure security basics.
• Familiar with SAST/DAST/CSPM/DSPM/ASPM tools.

Responsibilities

• Join engineering teams as a security expert and advisor.
• Create threat models and drive security architecture reviews.
• Review application source code for security defects.
• Attack applications throughout the Secure Development LifeCycle.
• Collaborate with developers to remediate defects and risks.
• Build automation for security tasks and tooling.
• Contribute to bug bounty response and cross-platform threat hunting.

Skills

CyberSecurity expertise

Agile/DevOps

Threat modeling STRIDE

Secure code review (Go/Python/JS)

Browser security (TypeScript/React/JS)

API security testing

Cloud security (GCP/AWS/Azure)

AppSec tools (SAST/DAST/CSPM/DSPM/ASPM

OWASP knowledge

Automation for AppSec

AI-assisted decision making

Cross-functional collaboration

Education

Security certifications

Tools

SAST

DAST

CSPM

DSPM

ASPM

Docker

Kubernetes

WASM

Kotlin

Scala

Job description

CrowdStrike, Inc. is seeking a Senior Application Security Engineer to secure CrowdStrike's web applications and products. You will review code, model threats, and work with engineering to fix defects while integrating security throughout the software lifecycle.

You will drive security automation, participate in bug bounty efforts, and expand threat modeling across multiple cloud environments. The role emphasizes collaboration with product teams and strong problem-solving in a fast-paced,