Senior Windows Sensor Performance Engineer - Hybrid Role

CrowdStrike; Sunnyvale (CA); Hybrid; USD 160,000 - 250,000; Full time

Benefits offered by this job

Market-leading compensation

Wellness programs

Vacation and holidays

Parental leave

Professional development

Employee networks

Office amenities

Great Place to Work Certified

Job summary

CrowdStrike in Sunnyvale seeks a Senior 2 Engineer to be the deep technical authority on Windows sensor performance. This hands‑on role bridges kernel‑mode internals, ETW/WPA trace analysis, and escalations, owning complex investigations and shaping diagnostic tooling.

You’ll extend ETW/WPP providers, analyze WPA/ETL data, and review PRs for performance. Hybrid work; 10+ years Windows experience required; AI‑driven decision making valued.

Qualifications

• 10+ years of hands-on Windows kernel-mode development or deep Windows systems engineering.
• Expert-level WPA, xperf, ETW/WPP tracing and ETL analysis with stack attribution and CPU sampling.
• Strong knowledge of Windows kernel APIs for endpoint security: registry filter, process/thread notifications, load image callbacks.
• Experience with complex multi-process interactions and performance impacts.
• Proven experience using AI to enhance decision-making and improve workflows.

Responsibilities

• Own deep-drop performance analysis of the Falcon sensor on Windows, from triage to shipped fix.
• Drive development of ETW-based diagnostic instrumentation and extend WPP providers.
• Perform WPA/ETL analysis for support cases and benchmarking with per-component CPU attribution.
• Review PRs targeting Windows sensor performance improvements: load image callbacks, registry filters, thread notifications.
• Identify observability gaps and push tooling to close them.

Skills

Windows kernel-mode

ETW tracing

WPA

Performance analysis

Multi-process systems

AI-driven decisions

Tools

Windows Performance Analyzer (WPA)

xperf

ETW/WPP tracing

ETL analysis

Job description

CrowdStrike in Sunnyvale seeks a Senior 2 Engineer to be the deep technical authority on Windows sensor performance. This hands‑on role bridges kernel‑mode internals, ETW/WPA trace analysis, and escalations, owning complex investigations and shaping diagnostic tooling.

You’ll extend ETW/WPP providers, analyze WPA/ETL data, and review PRs for performance. Hybrid work; 10+ years Windows experience required; AI‑driven decision making valued.