Senior Exploit Researcher — Threat Intelligence

CrowdStrike; Illinois; On-site; USD 85,000 - 120,000; Full time

Benefits offered by this job

Market-leading compensation

Wellness programs

Professional development

Paid parental leave

Diversity & inclusion

Global offices

Job summary

CrowdStrike is seeking a security researcher for the Technical Analysis Cell (TAC) to analyze exploit techniques observed in the wild and support adversary tracking. The role focuses on defensive research, reverse engineering, and threat intelligence reporting within a highly skilled team.

The position requires strong Python skills, familiarity with disassemblers and debuggers, and the ability to write clear threat intelligence. Remote work with occasional travel is offered.

Qualifications

• Proficiency in exploitation techniques commonly seen in userspace and kernel-level exploits.
• Knowledge of common network service exploitation techniques.
• Solid understanding of Windows operating system.
• Familiarity with web-based exploitation vectors.
• Collaborative mindset and strong teamwork.
• Proven experience with reverse engineering tools and processes.
• Programming/scripting in Python.
• Ability to leverage AI tools to speed vulnerability research and validate findings.
• Excellent writing skills are mandatory.

Responsibilities

• Implement tracking systems to inform cross-team adversary tracking.
• Improve detection capabilities for exploits and malicious payloads.
• Identify new data sources to increase threat visibility.
• Maintain detailed understanding of exploit internals through reverse engineering.
• Develop tools to automate exploit analysis tasks.
• Create a classification framework for intrusion activity based on vulnerabilities.

Skills

Exploitation techniques

Reverse engineering

Python

AI-assisted tools

Technical writing

Education

MA/MS in Computer Science

Tools

Disassemblers

Debuggers

Decompilers

Malware Analysis

Job description

CrowdStrike is seeking a security researcher for the Technical Analysis Cell (TAC) to analyze exploit techniques observed in the wild and support adversary tracking. The role focuses on defensive research, reverse engineering, and threat intelligence reporting within a highly skilled team.

The position requires strong Python skills, familiarity with disassemblers and debuggers, and the ability to write clear threat intelligence. Remote work with occasional travel is offered.