Engineer III - Sensor
Core
Research and develop techniques for detecting malicious activity on Linux systems, then build them into production-level solutions for deployment in the CrowdStrike Falcon Host sensor.
Role type
Senior IC Linux security engineer (threat detection & sensor development)
Builds
Production-level endpoint security sensors and detection logic for the Falcon Platform
Domain
Cybersecurity / Endpoint Protection / Linux OS internals
Deliverable
production ML models | product features
Required skills
Linux kernel and user space knowledge, C/C++ development, reverse engineering, threat detection, malware analysis, multi-threading, high-concurrency programming, secure coding, CI/CD, debugging, performance optimization
Preferred skills
Linux kernel programming, eBPF, macOS/Windows sensor development, 24/7 enterprise software delivery, AI technology utilization
Technologies
C, C++, Linux, eBPF, Falcon Platform
Responsibilities
Design and build detection logic and systems to detect cyber attackers, research techniques for detecting malicious activity including reverse engineering, own features from design to delivery, apply engineering best practices for secure and reliable code, collaborate with cross-functional teams, respond to and troubleshoot product issues
Seniority
Mid-Senior, hands-on IC