Associate Security Engineer (Remote)

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily.

Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation.

We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role:

CrowdStrike is seeking an Associate Security Engineer to join the Threat Intelligence & Detection Engineering (TIDE) team. The TIDE team authors detections to protect CrowdStrike's infrastructure while maintaining our detection pipeline, tools, and processes. In this role, you will help monitor, tune, and support our detection capabilities while learning from experienced engineers on the team.

A successful candidate will have a strong foundational understanding of security concepts, a passion for threat detection, and an eagerness to learn how to research attacker techniques and automate basic response workflows.

Our Team's mission is to build a robust detection, response, and remediation ecosystem to support the scale, growth, and security of CrowdStrike. You will assist in analyzing threat data, validating detection alert accuracy, and collaborating with cross-functional teams to keep our enterprise secure.

What You'll Do:

• Assist in writing, testing, and tuning basic security detections under the mentorship of senior engineers.
• Triage detection alerts, analyze event logs, and help identify potential security concerns across host and network data.
• Support team members in building simple scripts and automated workflows to streamline alert handling.
• Document detection rules, team processes, and operational workflows clearly.

What You’ll Need:

• 3-5 years of experience in Security Engineering, SOC Analysis, Incident Response, or a related technical role (internship or lab experience counts)
• Due to federal government compliance and GovCloud infrastructure requirements, candidates must be a U.S. Citizen or U.S. Permanent Resident
• Basic familiarity with SIEM or log analysis tools (e.g., LogScale, Splunk, Kibana, Elastic)
• Foundational understanding of common attacker techniques, network traffic, and host-based artifacts
• Basic proficiency in Python, PowerShell, GoLang, or another scripting language
• Understanding of core operating systems (Windows, MacOS, Linux) and fundamental networking concepts (TCP/IP, DNS, HTTP)
• Familiarity with web security basics (e.g., OWASP Top 10, SSL/TLS, common web vulnerabilities)
• Strong willingness to learn, ask questions, and adapt in a fast-paced environment
• Strong written communication skills and attention to detail
• B.S. in Computer Science, Cybersecurity, Information Technology, or equivalent hands-on experience (e.g., bootcamps, self-study projects, CTFs)

Bonus Points:

• Entry-level security certifications (e.g., CompTIA Security+, Network+, eJPT, GSEC)
• Active participation in CTFs (Catch The Flag), home lab projects, or open-source security tools
• Basic exposure to cloud environments (AWS, Azure, GCP) or container concepts (Docker)

This role will require the candidate to periodically undergo and pass additional background and fingerprint check(s) consistent with government customer requirements.