Senior Windows Sensor Performance Engineer

CrowdStrike; Austin (TX); Hybrid; USD 150,000 - 250,000; Full time

Benefits offered by this job

Market-leading compensation

Wellness programs

Generous vacation

Parental leave

Professional development

Employee networks

Office amenities

Great Place to Work

Job summary

CrowdStrike is seeking a Senior 2 Engineer for the Sensor Performance Engineering team to own deep technical investigations of the Falcon sensor on Windows. You’ll bridge kernel-mode internals, ETW/WPA trace analysis, and customer escalations to drive robust performance fixes.

Hybrid work in Austin with on-site days, you’ll shape diagnostic tooling, contribute to architecture, and collaborate across teams to improve endpoint security on Windows at scale.

Qualifications

• 10+ years of hands-on Windows kernel-mode development or deep Windows systems engineering.
• Expert-level proficiency with Windows Performance Analyzer (WPA), xperf, ETW/WPP tracing, and ETL file analysis.
• Strong working knowledge of Windows kernel APIs relevant to endpoint security: registry filter manager callbacks, process/thread notification callbacks, load image callbacks, access token and impersonation APIs.

Responsibilities

• Own deep-drop performance analysis of the Falcon sensor on Windows, from initial triage through root cause to shipped fix.
• Drive development and improvement of ETW-based diagnostic instrumentation, extending WPP providers, adding new event IDs, versioning existing events.
• Perform WPA/ETL analysis for customer support cases and internal benchmarking, including ETWReader-based bottleneck identification and per-component CPU attribution across sensor subsystems.
• Review and author PRs targeting Windows sensor performance improvements: load image callbacks, registry filter drivers, and process/thread notification routines.
• Identify sensor observability gaps and push for tooling to close them.

Skills

Windows kernel-mode

WPA/xperf tracing

ETW/WPP tracing

ETL analysis

Registry callbacks

Process/thread IPC

AI in workflows

Tools

WPA

xperf

ETW

ETL tools

Job description

CrowdStrike is seeking a Senior 2 Engineer for the Sensor Performance Engineering team to own deep technical investigations of the Falcon sensor on Windows. You’ll bridge kernel-mode internals, ETW/WPA trace analysis, and customer escalations to drive robust performance fixes.

Hybrid work in Austin with on-site days, you’ll shape diagnostic tooling, contribute to architecture, and collaborate across teams to improve endpoint security on Windows at scale.