Engineer 3, Sensor - SSP (Hybrid)

About the Role: CrowdStrike's Sensor Security Platform (SSP) team is hiring an engineer to work on the Falcon sensor's foundational detection and response functions. The SSP team's scope and mission exists at the intersection of three broad crowdstrike missions:

- Sensor mission - Whereas there may exist a holistic, end-to-end security platform that spans all of sensor and cloud; the SSP org specifically focuses on sensor -oriented mission, consisting of technology implemented entirely (or primarily) on the Crowdstrike endpoint agent known as the Falcon Sensor

- Security mission - Whereas the Falcon Sensor may behave as a generic endpoint agent that can satisfy many business use cases; the SSP org specifically focuses on security -oriented capability, consisting of technology that directly supports the company-wide mission of stopping breaches.

- Platform mission - Whereas the Crowdstrike platform offers numerous, distinct products and modules; the SSP org specifically focuses on platform -oriented mission, consisting of technology that is reusable across products and modules and that underpins multiple security features and use cases.

Some of the domains and technologies in the SSP portfolio are Sensor Classifications, Sensor Detection Pipelines and Templates, Sensor Security Posture and Response, Endpoint User Security as well as Sensor Antitampering. This role is targeting candidates who would work across (and take ownership of) a number of the existing SSP domains and technologies named above.

- This role is hybrid, requiring 2-3 days per week on-site at one of the posted locations.

- Understand, modify and assume shared ownership of complex and critical sensor detections and response capabilities

- Gain expertise in core logic of the falcon sensor, becoming a resource for other developers within Crowdstrike who use (and build on top of) the technologies owned by our team.

- Communicate design, constraints, guarantees and other aspects of the system.

- Communicate and collaborate with other teams at Crowdstrike, including engineering teams who use our tools; adversary response teams; malware researchers; product and program managers; and others.

- Write code in a variety of languages, including internally developed, non-imperative domain-specific languages. (Much, but not all, of the work we need will be written in the in-house language. This language is highly asynchronous and used to write responses to system events such as process creation and network traffic.

System programming experience on one or more of macOS, Linux, and Windows is helpful.)

- Diagnose and resolve issues discovered by customers or other engineering teams

- Design and implement performant, functionally-correct and well-structured logic.

- Can understand, maintain, and improve a large existing codebase.

- Can reason about, describe and communicate the nature of complex, highly-concurrent systems.

- Can reason about how our endpoint interacts with our cloud, and communicate with cloud development teams for both design and troubleshooting.

- Ability to read and write C++ (though this is not primarily a C++ position).

- Communicate, collaborate, and work effectively in a distributed team (across timezones and continents, and with a variety of subject matter expertise).

CrowdStrike, Inc. is committed to fair and equitable compensation practices. Placement within the pay range is dependent on a variety of factors including, but not limited to, relevant work experience, skills, certifications, job level, supervisory status, and location. The base salary range for this position for all U.S. candidates is $120,000 - $180,000 per year, with eligibility for bonuses, equity grants and a comprehensive benefits package that includes health insurance, 401k and paid time off.