. Engineer- Product Abuse
Sr. Engineer- Product Abuse position — see original posting for full details.
As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We’re also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.
About the Role
CrowdStrike's Product Abuse team sits at the intersection of threat intelligence, detection engineering, and platform security — defending the Falcon platform against sophisticated adversaries. As a Sr. Engineer, you'll lead threat hunting operations, architect detection and prevention capabilities, and drive security enhancements across our product portfolio. You'll operate at both strategic and tactical levels alongside a close-knit team of industry-leading engineers, with direct and measurable impact on CrowdStrike's security posture at global scale.
What You'll Do
Lead threat hunting operations against emergent threat activity involving platform misuse — to determine impact and drive resolution
Design and implement monitoring solutions to detect anomalies and potential abuse across external-facing services, APIs, and authentication surfaces
Lead technical aspects of incident response, including attack vector analysis, countermeasure implementation, and post-incident review
Develop automation and purpose-built tooling to streamline detection, mitigation, and reporting workflows
Instrument event-driven tooling to drive hunting efficiency and proactive prevention of evolving TTPs
Conduct regular security assessments and testing simulations targeting external attack surfaces and abuse vectors
Advocate for and drive product security enhancements across the Falcon platform, influencing engineering teams to build abuse resistance into the product
Implement and refine logging strategies to enhance visibility into potential abuse scenarios across cloud-native infrastructure
Contribute to roadmap and strategic planning for abuse prevention, balancing proactive and reactive capabilities
Support follow-the-sun operational coverage as part of a globally distributed team
What You Need:
Motivated self-starter with 7+ years of experience in a cybersecurity engineering or threat intelligence environment, with a significant focus on threat hunting, att
Posted June 7, 2026