Intelligence Launch Intern - Summer 2026 (Remote)

About the role

The Global Threat Analysis Cell (GTAC) is responsible for developing and attributing adversaries and tracking adversary activity. GTAC monitors numerous incidents, activity clusters, and adversary campaigns with a specific focus on identifying shifts in tradecraft, tooling, target scope and motivation. This position will be primarily tasked with tracking adversaries and cyber operations as well as identifying and tracking trends associated with these operations. The Intelligence Launch Intern will be required to research and report on cyber operations at both the strategic and tactical level as part of a close-knit team where collaboration is a critical driver for mission success. This position is instrumental in providing unique insight into adversary operations through finished Intelligence products used by CrowdStrike customers and stakeholders.

Responsibilities

• Identify and track cyber threats, trends, and new developments by targeted intrusion cyber threat actors through analysis of raw information, prior intelligence, and large data sets. Communicate these findings to CrowdStrike Intelligence customers via finished intelligence reports.
• Assimilate malware reverse engineering and geopolitical intelligence to form a picture of targeted intrusion adversaries
• Identify and track adversarial infrastructure using open source and proprietary tools
• Collect and collate information on the adversaries' tactics, techniques, and procedures (TTPs)
• Apply analytic tradecraft to gathered information to create finished intelligence in varying predetermined suspense and depth
• Collaborate across teams to inform various functions within CrowdStrike Intelligence about activity of interest and to coordinate adversary/campaign tracking
• Prioritize, categorize, and respond to requests for information from internal and external customers

Requirements

• Must be currently enrolled and completed at least 2 years at a 4-year university by the start of the internship, working towards a Bachelor's degree and graduating in 2028.
• Practical knowledge of research/collection tradecraft and analytical methods - to include regular use of common research-related platforms (e.g., malware repositories, network infrastructure tracking services, webpage scanners, malware sandboxes, etc.)
• Interest in identifying and tracking adversary tradecraft
• Ability to produce quality reports of varying lengths on short deadlines, as well as continuing to maintain analysis for and report on long-term strategic assessments
• Working understanding of network principles and technical terminology
• Ability or willingness to learn to conduct basic technical analysis of the tools and tradecraft used by threat actors
• Strong knowledge of the targeted intrusion threat landscape
• Strong organization and communication skills and ability to work in a remote-first environme

Benefits

Additional Information

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn't changed - we're here to stop breaches, and we've redefined modern security with the world's most advanced AI-native platform. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We're always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Our University Recruiting program is dedicated to attracting and cultivating the future leaders of this industry. This program offers paid positions for students and recent grads, designed to provide exposure to work that makes an impact while being supported through a structured experience with seasoned professionals. Ready to join a mission that matters? The future of cybersecurity starts with you. Location & Work Arrangement FULLY REMOTE: The Intelligence Launch Internship is fully remote and requires no travel. Your work location is the city/town/province you will be working from remotely. For our internship program, interns are allowed to work remotely from an alternative location for up to 2 weeks. Interns are also invited to work out of the CrowdStrike office located closest to their remote location. Time Commitment: Interns are expected to work 40 hours per week, Monday through Friday, during standard business hours. Start & End Dates: July 2026 - September 2026 About the Program: The CrowdStrike Launch Internship Program is an exclusive early-career opportunity designed for exceptional sophomore level students (Class of 2028). This program offers students the chance to gain hands-on experience at one of the world's leading cybersecurity companies while still early in their academic journey.

Your Match

How well this role fits your profile.

Company Intel

What employees say

Worked at CrowdStrike? Share your experience