Senior Application Security Engineer: Web & Cloud Defender

CrowdStrike Holdings, Inc.; California (MO); Hybrid; USD 160,000 - 250,000; Full time

Benefits offered by this job

Competitive compensation

Wellness programs

Paid time off

Professional development

Job summary

CrowdStrike is seeking a Senior Application Security Engineer to secure our web applications and protect customers from advanced threats. You will dive into code, identify defects, and drive fixes across engineering teams.

You’ll build security into the SDLC, develop threat models, and automate security tasks while collaborating with product engineers to harden our platform. Ideal candidates have deep browser security expertise, hands-on API testing, and experience with cloud-native deployments

Qualifications

• 10+ years of cybersecurity experience with expertise in identifying security defects and working with engineering teams
• Experience with threat model framework(s), especially STRIDE
• Proven experience in manual secure code review for apps built with Go, Python, or JavaScript
• Hands-on review and testing of API endpoint security

Responsibilities

• Join engineering teams as a security expert and advisor, influencing product design and capabilities
• Create, maintain, and mature threat models to drive security architecture review
• Review application source code for security defects and risks
• Attack applications throughout the Secure Development LifeCycle
• Collaborate with developers to remediate defects, risks, and design weaknesses
• Build integrated tools and automation for security tasks and workflows
• Lead responses to the bug bounty program and improve platform security

Skills

Cybersecurity expertise

Threat modeling STRIDE

Manual secure code review

Go

Python

JavaScript

API security testing

Browser security

Agile/DevOps familiarity

Tools

Docker

Kubernetes

SAST/DAST tools

Cloud platforms (AWS/Azure/GCP)

WebAssembly (WASM)

Job description

CrowdStrike is seeking a Senior Application Security Engineer to secure our web applications and protect customers from advanced threats. You will dive into code, identify defects, and drive fixes across engineering teams.

You’ll build security into the SDLC, develop threat models, and automate security tasks while collaborating with product engineers to harden our platform. Ideal candidates have deep browser security expertise, hands-on API testing, and experience with cloud-native deployments