Sr. Engineer- Product Abuse

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We’re also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role

CrowdStrike's Product Abuse team sits at the intersection of threat intelligence, detection engineering, and platform security — defending the Falcon platform against sophisticated adversaries. As a Sr. Engineer, you'll lead threat hunting operations, architect detection and prevention capabilities, and drive security enhancements across our product portfolio. You'll operate at both strategic and tactical levels alongside a close-knit team of industry-leading engineers, with direct and measurable impact on CrowdStrike's security posture at global scale.

What You'll Do

Lead threat hunting operations against emergent threat activity involving platform misuse — to determine impact and drive resolution

Design and implement monitoring solutions to detect anomalies and potential abuse across external-facing services, APIs, and authentication surfaces

Lead technical aspects of incident response, including attack vector analysis, countermeasure implementation, and post-incident review

Develop automation and purpose-built tooling to streamline detection, mitigation, and reporting workflows

Instrument event-driven tooling to drive hunting efficiency and proactive prevention of evolving TTPs

Conduct regular security assessments and testing simulations targeting external attack surfaces and abuse vectors

Advocate for and drive product security enhancements across the Falcon platform, influencing engineering teams to build abuse resistance into the product

Implement and refine logging strategies to enhance visibility into potential abuse scenarios across cloud-native infrastructure

Contribute to roadmap and strategic planning for abuse prevention, balancing proactive and reactive capabilities

Support follow-the-sun operational coverage as part of a globally distributed team

What You Need:

Motivated self-starter with 7+ years of experience in a cybersecurity engineering or threat intelligence environment, with a significant focus on threat hunting, att