Sr. Engineer- Product Abuse (Remote)

External

Crowdstrike · Remote

Full-timeRemoteToday

Cloud SecurityIncident ResponseJavaScriptMachine LearningOAuthReact

Cover Letter Connect

Prepare for this interview

Elite

AI-generated questions, company research, and talking points tailored to this role

About the role

CrowdStrike's Product Abuse team sits at the intersection of threat intelligence, detection engineering, and platform security - defending the Falcon platform against sophisticated adversaries. As a Sr. Engineer, you'll lead threat hunting operations, architect detection and prevention capabilities, and drive security enhancements across our product portfolio. You'll operate at both strategic and tactical levels alongside a close-knit team of industry-leading engineers, with direct and measurable impact on CrowdStrike's security posture at global scale.

Responsibilities

Lead threat hunting operations against emergent threat activity involving platform misuse - to determine impact and drive resolution

Design and implement monitoring solutions to detect anomalies and potential abuse across external-facing services, APIs, and authentication surfaces

Lead technical aspects of incident response, including attack vector analysis, countermeasure implementation, and post-incident review

Develop automation and purpose-built tooling to streamline detection, mitigation, and reporting workflows

Instrument event-driven tooling to drive hunting efficiency and proactive prevention of evolving TTPs

Conduct regular security assessments and testing simulations targeting external attack surfaces and abuse vectors

Advocate for and drive product security enhancements across the Falcon platform, influencing engineering teams to build abuse resistance into the product

Implement and refine logging strategies to enhance visibility into potential abuse scenarios across cloud-native infrastructure

Contribute to roadmap and strategic planning for abuse prevention, balancing proactive and reactive capabilities

Support follow-the-sun operational coverage as part of a globally distributed team

What You Need:

Motivated self-starter with 7+ years of experience in a cybersecurity engineering or threat intelligence environment, with a significant focus on threat hunting, attack mitigation, and tooling

Proficiency in security automation and tool development

Practical experience with cloud computing platform security services - particularly as they relate to infrastructure protection, identity and access management, and continuous monitoring

Deep familiarity with abuse-relevant attack patterns including credential stuffing, account takeover, API abuse, trial fraud, and adversarial misuse of security tooling

Ability to identify when external-facing services are exceeding baselines and correlate deviations with potential attack indicators

Comprehensive understanding of TTPs employed by threat actors and the evolving threat landscape, including nation-state and eCrime actors

Passionate about taking initiative to identify and develop enrichments and enhanced visibility

Enthusiasm for collaboration across functional teams - including Product & Engineering - to drive platform-wide abuse resistance

Bonus Points:

Experience leveraging AI coding assistants and LLM-based tools as a force multiplier - accelerating tooling development, detection engineering, and automation at a pace beyond traditional workflows

Experience applying data science techniques - such as machine learning, neural networks, or streaming anomaly detection - to generate threat signals, identify behavioral outliers, or integrate disparate datasets at enterprise scale

Experience with front-end UI design, including contributions to large and complex codebases using HTML5, JavaScript, React, or similar technologies

Experience with SIEM platforms (e.g., LogScale) for large-scale threat hunting and detection engineering

Experience with identity and authentication systems, including OAuth, SAML, MFA bypass techniques, and session abuse patterns

Expertise in designing and implementing robust network and cloud security measures, and comprehensive logging and monitoring for threat detection and incident response

Experience operating in or supporting a follow-the-sun security operations model

Strong background in OSINT, cybercrime investigations, or intelligence collection involving complex adversarial

Sr. Engineer- Product Abuse (Remote)

About the role

Responsibilities

Benefits

Additional Information

Your Match

Company Intel

What employees say

Interested in this role?