Senior Security Researcher: Exploit Analysis (Remote)

CrowdStrike; Iowa (LA); Hybrid; USD 85,000 - 120,000; Full time

Benefits offered by this job

Market-leading compensation

Wellness programs

Vacation and holidays

Parental leave

Professional development

Employee networks

Job summary

CrowdStrike is seeking a highly skilled security researcher to analyze in-the-wild exploits and contribute to intelligence for adversary tracking. This purely defensive role is remote with opportunities for travel and frequent collaboration with the Intelligence team.

You’ll develop automation, signatures, and reporting to inform mitigation strategies while documenting complex exploitation techniques and staying ahead of evolving threats.

Qualifications

• Proficiency in exploitation techniques used in userspace and kernel exploits.
• Knowledge of common network service exploitation techniques.
• Solid understanding of Windows and at least two operating system platforms.
• Familiarity with standard web-based exploitation vectors.
• Excellent writing skills are mandatory.

Responsibilities

• Implement tracking systems for adversary tracking based on exploitation behavior.
• Improve and maintain capabilities for detecting exploits and malicious payloads.
• Identify opportunities to increase threat visibility using new data sources.
• Maintain understanding of exploits through reverse engineering.
• Develop tools to automate exploit analysis tasks.
• Create a classification framework for intrusion activity based on vulnerabilities used.
• Contribute to active mitigation efforts with technical expertise.
• Develop host-based and network-based signatures for large-scale hunting and prevention.

Skills

Exploitation techniques

Reverse engineering

Python

AI tools / LLMs

Technical writing

Windows proficiency

Threat intelligence

Collaboration

Education

MA/MS or equivalent in computer science

Tools

Disassemblers

Decompilers

Debuggers

Job description

CrowdStrike is seeking a highly skilled security researcher to analyze in-the-wild exploits and contribute to intelligence for adversary tracking. This purely defensive role is remote with opportunities for travel and frequent collaboration with the Intelligence team.

You’ll develop automation, signatures, and reporting to inform mitigation strategies while documenting complex exploitation techniques and staying ahead of evolving threats.