Senior Exploit Researcher - Remote

CrowdStrike; San Antonio (TX); On-site; USD 85,000 - 120,000; Full time

Benefits offered by this job

Health insurance

401k

Paid time off

Parental leave

Professional development

Equity awards

Wellness programs

Employee networks

Job summary

CrowdStrike is seeking a motivated security researcher to analyze in-the-wild exploits and develop defenses for our AI-native platform. You will perform vulnerability and exploit analysis, reverse engineering, and produce actionable threat intelligence for defenders across industries.

Remote with occasional travel, the role involves building automation, signatures, and cross-team collaboration to identify attacker techniques and mitigate exploits at scale.

Qualifications

• Proficiency in exploitation techniques common to userspace and kernel vulnerabilities.
• Familiarity with network service exploitation techniques.
• Solid understanding of Windows and at least one other OS.
• Knowledge of web-based exploitation vectors and reverse engineering.
• Ability to write clearly and produce actionable threat intelligence.

Responsibilities

• Track adversary landscape based on intrusion behavior.
• Develop tools to automate exploit analysis and extend analysis frameworks.
• Create host- and network-based signatures for large-scale hunting and prevention.
• Produce high-quality threat intelligence reporting with mitigation guidance.
• Brief diverse audiences on technical analyses and findings.
• Collaborate across teams to inform mitigation strategies and products.

Skills

Exploitation techniques

Network exploitation

Windows OS

Web exploitation

Reverse engineering

Python

AI tools

LLMs

Technical writing

Team collaboration

Education

MA/MS in CS

Tools

Disassemblers

Decompilers

Debuggers

Job description

CrowdStrike is seeking a motivated security researcher to analyze in-the-wild exploits and develop defenses for our AI-native platform. You will perform vulnerability and exploit analysis, reverse engineering, and produce actionable threat intelligence for defenders across industries.

Remote with occasional travel, the role involves building automation, signatures, and cross-team collaboration to identify attacker techniques and mitigate exploits at scale.