Address
Form of workProduct Security Engineer, Software Assurance
About the Role:
Help us protect CrowdStrike and its customers from the most advanced threats by securing our software supply chain. CrowdStrike’s Product Security team breaks the mold of traditional internal security, and focuses on active threats to CrowdStrike’s products. As a Security Engineer you will perform security assessments of third party software, assist with supply chain vulnerability management, and assist teams migrating technology and processes to more secured options. Additionally, you may be responsible for running projects to further harden internal systems and processes against active and emerging threats.
What You’ll Do:
Assess risk and provide security guidance on software implementations to engineers across the company
Threat hunt in build and signing pipelines to improve security
Create and monitor alerts related to supply chain security
Advocate for best-security practices to the entire engineering organization
Respond to emerging threats
What You’ll Need:
Experience working in engineering role implementing, and supporting security systems
Experience working with and securing configurations of Linux and/or other Unix-like variants
Strong experience in one or more common scripting languages, such as shell, Python, Golang, javascript, etc
Working knowledge of secure coding practices, reviews, and system hardening
Understanding of software build pipeline applications, systems, and processes
Experience with common monitoring or log aggregation tools such as Splunk, DataDog, Prometheus, etc.
Preferred:
Experience working in and secure configurations of large-scale cloud platforms with highly concurrent, highly available systems
Self-motivated to identify security problems and engage with teams to find solutions
Efficient communicator with strong writing skills, experience working remotely
Experience working at extremely large scale
Relevant experience in the area of code reachability
Static Code Analysis experience
Education/Certifications:
Technical security certifications or academic background are a plus.
