Sr. Security Researcher (Remote).

CrowdStrike; Idaho; On-site; USD 85,000 - 120,000; Full time

Benefits offered by this job

Professional development opportunities

Vacation and holidays

Parental/adoption leave

Equity and compensation transparency

Wellness programs

Job summary

CrowdStrike is seeking a motivated security researcher to join the Intelligence team, focusing on analyzing exploits observed in the wild and documenting exploitation techniques. This is a defense-oriented role that emphasizes deep technical analysis, reverse engineering, and collaborative intelligence efforts.

You will develop classification frameworks, generate actionable mitigation guidance, and work with engineers to strengthen detection and response capabilities.

Qualifications

• Proficiency in exploitation techniques for userspace and kernel vulnerabilities.
• Knowledge of common network service exploitation techniques.
• Solid understanding of Windows and at least one other OS.
• Familiarity with web-based exploitation vectors.
• Collaborative mindset and strong teamwork.
• Proficient with reverse engineering tools and processes.
• Proficient in Python and scripting.
• Ability to leverage LLMs and AI tools to accelerate research.
• Proven experience using AI to improve decision-making and workflows.
• Strong written and verbal communication skills.

Responsibilities

• Implement tracking systems for adversary tracking based on exploitation behavior.
• Improve detection capabilities for exploits and payloads.
• Identify new data sources to increase threat visibility.
• Maintain understanding of exploit internals via reverse engineering.
• Develop tools to automate exploit analysis tasks.
• Create classification frameworks for attribution of intrusions.
• Contribute to active mitigation with technical expertise.
• Develop host- and network-based signatures for large-scale hunting and prevention.
• Produce high-quality threat intelligence reporting with actionable guidance.
• Brief stakeholders and collaborate across teams on exploit activity.

Skills

Exploit analysis

Network exploit techniques

Windows OS

Reverse engineering

Python

AI-assisted tooling

Technical writing

Team collaboration

Threat intelligence

Verbal/visual briefing

Education

MA/MS in Computer Science or related

Tools

Disassemblers

Decompilers

Debuggers

Snort

YARA

Job description

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About The Role

CrowdStrike Intelligence is seeking a motivated security researcher with excellent technical skills to research in-the-wild exploits for all types of vulnerabilities. Our Technical Analysis Cell (TAC) is at the forefront of CrowdStrike’s battles with state-sponsored adversaries and criminal actors. We combine world-class intelligence analysis with deep-dive reverse engineering and malicious code analysis, building and using cutting-edge automation systems to deliver actionable indicators and operational insights. This is purely a defensive role on the TAC team that is focused on analyzing, understanding and documenting exploitation techniques that are observed in the wild.

What You’ll Do

We are ideally looking for a seasoned specialist in vulnerability and exploit analysis to help track the adversary landscape based on intrusion behavior. That said, we are also open to applications by experienced and talented malware analysts or reverse engineers without significant knowledge in this field who are willing to rapidly expand their skills to meet the following requirements:

Technical Analysis

• Implement tracking systems that inform cross-team adversary tracking efforts based on observed exploitation behavior.
• Improve and maintain capabilities for detecting exploits, malicious payloads and other potential attack vectors using existing data sources.
• Identify opportunities for increasing the visibility of threats, specifically exploits, using new data sources.
• Maintain a detailed understanding of the inner functioning of relevant exploits through reverse engineering.
• Develop tools to assist with the automation of exploit analysis tasks by extending static and dynamic analysis frameworks.
• Create a classification framework that aids attribution of intrusion activity based on vulnerabilities used and characteristics in observed exploits.
• Contribute to active mitigation efforts with technical expertise.
• Develop host-based and network-based signatures suited for large-scale hunting, detection, and prevention of identified exploits.

Intelligence Reporting

• Produce high-quality threat intelligence reporting for all levels of readership, including actionable mitigation and detection guidance.
• Experience in technical writing.
• Ability to brief complex technical analysis results to different audiences.
• Collaborate across teams to inform various functions within CrowdStrike Intelligence and beyond about activity of interest, to coordinate adversary and campaign tracking, and to provide support to teams developing exploit mitigation strategies and products.
• Conduct briefings as needed for a variety of levels of customers as requested (via either phone, video conference, webcast, in-person briefing, or industry conference).

Required

• Proficiency in exploitation techniques that are commonly seen in exploits for userspace and kernel-level vulnerabilities.
• Knowledge of common network service exploitation techniques.
• Solid understanding of at least two operating system platforms, including Microsoft Windows.
• Familiarity with standard web-based exploitation vectors.
• Collaborative mindset, strong team player who enables others.
• Profound knowledge of reverse engineering tools (disassemblers, decompilers, debuggers) and processes (unpacking malware, reconstructing code logic, etc).
• Knowledge of programming and scripting languages, in particular Python.
• Ability to effectively leverage Large Language Models (LLMs) and AI-assisted tools to accelerate vulnerability research, and exploit analysis while independently validating technical findings.
• Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.
• Ability to express complex technical and non-technical concepts in verbal and graphical products.
• Excellent writing skills are mandatory.

Preferred

• Experience in attribution and intelligence analysis is a plus.
• A background in intelligence writing is a plus.
• Experience in writing Snort and YARA signatures is a plus.

Education

• MA/MS or equivalent experience in Computer Science, or a related field

Location

• Remote, with the possibility of occasional travel.

Benefits Of Working At CrowdStrike

• Market leader in compensation and equity awards
• Comprehensive physical and mental wellness programs
• Competitive vacation and holidays for recharge
• Paid parental and adoption leaves
• Professional development opportunities for all employees regardless of level or role
• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
• Vibrant office culture with world class amenities
• Great Place to Work Certified across the globe

CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.

CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions— including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs—on valid job requirements.

CrowdStrike participates in the E-Verify program.

Notice of E-Verify Participation

Right to Work

CrowdStrike, Inc. is committed to fair and equitable compensation practices. Placement within the pay range is dependent on a variety of factors including, but not limited to, relevant work experience, skills, certifications, job level, supervisory status, and location. The base salary range for this position for all U.S. candidates is $85,000 - $120,000 per year, with eligibility for bonuses, equity grants and a comprehensive benefits package that includes health insurance, 401k and paid time off.

Expected Close Date of Job Posting is:10-04-2026,