Engineer II, Software Assurance, Product Security (Remote)

CrowdStrike is a global cybersecurity company focused on protecting organizations with an AI-native security platform. The Engineer II, Software Assurance, Product Security role secures the software supply chain by assessing open-source risks, implementing GitHub security controls, monitoring dependencies, and automating security operations.

Responsibilities:

• Assess risk and provide security guidance to engineers across the company on open-source software usage and repository configurations
• Implement and maintain controls and processes to secure public and private GitHub organizations, including repository guardrails and secret scanning
• Harden open-source code usage, development, ingestion, and distribution across the enterprise
• Investigate open-source dependencies and third-party packages to mitigate supply chain risks (e.g., typosquatting, dependency confusion)
• Advocate for secure coding and open-source compliance practices to the wider engineering organization
• Contribute to the delivery of security initiatives aimed at hardening CrowdStrike’s software supply chain and code-hosting environments

Requirements:

• Experience working in an engineering role implementing, supporting, and monitoring software security systems
• Strong working experience with GitHub, including repository administration, GitHub Actions, branch protection rules, and access management
• Familiarity with other source control management tools (e.g., BitBucket, GitLab)
• Familiarity with artifact storage tools like Artifactory and S3
• Experience identifying and mitigating open-source risks (SCA, dependency management, licensing risks)
• Experience working with and securing configurations of Linux and/or other Unix-like variants
• Proficiency in one or more common scripting languages, such as Python, Golang, Shell, or JavaScript, to automate security checks
• Domain knowledge of the software development lifecycle (SDLC), secure coding practices, code reviews, and source control security
• Collaborative mindset with experience contributing to cross-team security projects and initiatives
• Experience utilizing AI technologies to enhance decision-making, streamline workflows, or automate vulnerability triage
• Efficient communicator with strong writing skills, comfortable working in a remote environment
• Experience with common monitoring or log aggregation tools such as LogScale, Splunk, DataDog, Prometheus, etc
• Understanding of CI/CD pipelines and associated tools (Jenkins, Argo CD) from an integration and ingestion perspective
• Experience working in and securing configurations of large-scale cloud platforms
• Self-motivated to identify security problems and engage with development teams to find pragmatic solutions