Senior Security Researcher - Remote Exploit Analysis Lead

CrowdStrike; Maryland; Hybrid; USD 85,000 - 120,000; Full time

Benefits offered by this job

Competitive pay

Wellness programs

Vacation days

Parental leave

Career development

Equity

Job summary

CrowdStrike is seeking a motivated security researcher to analyze in-the-wild exploits, focusing on vulnerability exploitation techniques and reverse engineering. This role sits on the TAC team, contributing to global threat tracking and intelligence efforts from a remote US location.

You will develop automation tools, write detailed assessments, and produce actionable mitigation guidance. Travel may be required as part of collaboration with other teams and customers.

Qualifications

• Proficiency in exploitation techniques for userspace and kernel vulnerabilities.
• Knowledge of network service exploitation techniques.
• Strong understanding of Windows operating system.
• Excellent writing skills and ability to communicate complex results.

Responsibilities

• Develop tracking systems for cross-team adversary tracking based on exploitation behavior.
• Improve detection capabilities for exploits and malicious payloads using data sources.
• Create host- and network-based signatures for large-scale hunting and detection.
• Produce high-quality threat intelligence reports with actionable guidance.
• Collaborate across CrowdStrike teams to inform mitigation strategies.

Skills

Python

Reverse engineering

Exploitation techniques

Windows OS

Threat intelligence

Education

MA/MS in Computer Science or equivalent

Tools

Disassemblers

Debuggers

Snort signatures

YARA signatures

Job description

CrowdStrike is seeking a motivated security researcher to analyze in-the-wild exploits, focusing on vulnerability exploitation techniques and reverse engineering. This role sits on the TAC team, contributing to global threat tracking and intelligence efforts from a remote US location.

You will develop automation tools, write detailed assessments, and produce actionable mitigation guidance. Travel may be required as part of collaboration with other teams and customers.