Engineer III - Content

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We’re also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role

Join CrowdStrike's Falcon For IT product team as a Content Engineer, where you'll create and maintain a global library of IT automation scripts, or content, deployed to millions of endpoints. If you're a systems administrator who has automated away repetitive tasks, written scripts that run across thousands of servers, and understands the difference between "works on my laptop" and "works on 10,000 production endpoints" - this role is for you.

You will author native OS scripts (PowerShell, Bash, Zsh), Python automation, OSQuery queries, and visualization dashboards that solve real-world IT operations problems: health monitoring, inventory collection, compliance checking, and system remediation. Your code will run on millions of Windows, Linux, and macOS endpoints globally.

Most sysadmin roles have you managing infrastructure. This role has you creating the automation tools that thousands of other IT teams will use to manage their infrastructure. Your scripts will run on more endpoints than most sysadmins will touch in their entire career. You'll solve problems once, and that solution will be deployed globally.

About the Product Falcon For IT revolutionizes how IT & Security teams manage their infrastructure by providing AI-powered insights into endpoints, applications, and system behavior. Our cloud-based platform processes real-time telemetry from our lightweight sensor deployed across customer environments, delivering instant answers to complex infrastructure questions and accelerating incident response times.

What You'll Do:

• Author production-grade automation scripts for Windows (PowerShell), Linux (Bash), and macOS (Zsh) that execute safely at massive scale

• Build IT operations content including system health checks, inventory collection, performance monitoring, compliance validation, remediation tasks, and other content that solves problems for our customers.

• Create visualization dashboards using CrowdStrike's Next-Gen SIEM to display data and metrics from your scripts.

• Optimize for performance and safety - your scripts must run efficiently on resource-constrained endpoints without impacting user productivity

• Design cross-platform solutions where possible, or platform-specific implementations where necessary

• Validate content quality through code review, testing, and security analysis before publication

• Collaborate with IT operations teams to understand real-world problems and translate them into automation solutions

• Maintain the content publication pipeline working with engineering teams to enhance content delivery and validation systems

• Source and validate third-party content ensuring it meets CrowdStrike quality and security standards

Technical Stack:

• Primary Languages: PowerShell, Bash, Zsh, Python

• Query Languages: OSQuery, LogScale/Humio

• Platforms: Windows, Linux (Ubuntu/RHEL/CentOS/Debian), macOS

• Tools: Git, VSCode, PowerShell ISE, vim/nano, SSH, RDP

• Data Visualization: LogScale/Humio dashboards

• CI/CD: GitHub Actions, automated testing pipelines

• Cloud: AWS (S3, Lambda, EC2) - exposure helpful but not required

• Use of AI-Powered Development to accelerate SDLC process ensuring security and business context.

What You'll Need:

Core Systems Administration Experience 5+ years in systems administration with heavy automation/scripting focus in at least one of:

Windows Administration:

• Advanced-level PowerShell scripting (5.1+ compatibility required)

• Deep understanding of Windows internals: registry, services, event logs, WMI/CIM, scheduled tasks

• Experience with Active Directory, Group Policy, Windows Update mechanisms

• Performance optimization: .NET calls vs cmdlets, efficient loops, avoiding pipeline overhead

• Written scripts managing thousands+ Windows servers/endpoints

Linux Administration:

• Advanced-level Bash scripting with focus on portability (RHEL/CentOS, Ubuntu, Debian, Amazon Linux, SUSE)

• Deep understanding of Linux fundamentals: systemd, package managers (yum/dnf/apt), process management, file permissions

• Experience with configuration management, log analysis, system monitoring

• Safe scripting practices: proper error handling, quoting, lock file management

• Written scripts managing thousands+ Linux servers/endpoints

macOS Administration:

• Advanced-level Zsh/Bash scripting for macOS environments

• Understanding of macOS-specific tools: launchd, defaults, diskutil, system_profiler Experience with MDM concepts, macOS security and privacy features, application management

• Knowledge of macOS versions and compatibility considerations

• Written scripts managing large macOS fleets

Real world experiences:

• Automated yourself out of repetitive work and helped others do the same

• Wrote that one script everyone in your org uses because it just works reliably

• Understands the fear of pushing automation to production at 3pm on Friday

• Has war stories about scripts that seemed fine in testing but had unexpected behavior at scale

• Thinks in terms of edge cases: "What if the disk is full? What if the service doesn't exist? What if there are special characters in the filename?"

• Reads release notes for OS updates to see what might break your scripts

• Cares about performance: "This runs in 2 seconds instead of 30 because I used a hash table instead of filtering an array in a loop"

• Values code review: You want someone to catch your mistakes before they hit production

Additional Required Skills

• Python scripting for cross-platform automation

• IT operations mindset: You think about monitoring, alerting, health checks, inventory, compliance, and remediation

• Scale awareness: You understand that code running on 10,000 endpoints needs different error handling, performance optimization, and testing than one-off scripts

• Security consciousness: No hardcoded credentials, input validation, safe file operations, principle of least privilege

• Problem-solving: You can translate "our Windows updates are failing" into a diagnostic script that identifies root causes

• Willingness to learn: If you're a Windows expert, you're excited to learn Linux/Mac (or vice versa) - the fundamentals transfer

Bonus Points:

• Experience with OSQuery for cross-platform system querying

• Multi-platform experience (Windows + Linux, or any combination)

• Knowledge of LogScale/Humio/Splunk or similar log aggregation platforms

• Understanding of cybersecurity concepts (EDR, threat hunting, incident response) Experience with endpoint management platforms

• CI/CD pipeline experience (GitHub Actions, Jenkins, GitLab)

• Database experience (MySQL, PostgreSQL, or NoSQL)

Soft Skills

• Attention to detail: A missing quote or improper error handling can impact thousands of endpoints

• Clear communication: Your documentation helps IT teams understand what your scripts do and how to interpret results

• Collaboration: You'll work with product managers, engineers, and customers to understand requirements

• Pragmatism: You balance "perfect" with "ships on time" and know when good enough is good enough

• Continuous learning: Technology changes, OSes evolve, and you stay current Ownership mentality: You take pride in your work and stand behind your code

#LI-SM2

#LI-DP1

Benefits of Working at CrowdStrike:

• Market leader in compensation and equity awards

• Comprehensive physical and mental wellness programs

• Competitive vacation and holidays for recharge

• Paid parental and adoption leaves

• Professional development opportunities for all employees regardless of level or role

• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections

• Vibrant office culture with world class amenities

• Great Place to Work Certified™ across the globe

CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.

CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements.

If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at recruiting@crowdstrike.com for further assistance.