Product Security Engineer, Vulnerability Intelligence

CrowdStrike is a global cybersecurity company focused on protecting organizations from advanced threats. The Product Security Engineer will monitor emerging vulnerabilities, assess exploitability and business risk, deploy security monitoring systems, develop vulnerability management metrics, and use the Falcon platform to improve security posture.

Responsibilities:

• Analyze emerging vulnerabilities, assess exploitability and business risk, and recommend prioritized remediation strategies
• Conduct risk-based analysis of vulnerability exposure and develop data-driven prioritization frameworks aligned with business risk tolerance
• Implement and monitor tools for detection and monitoring of assets across multiple clouds and data centers
• Develop and maintain vulnerability management KPIs and communicate security posture to technical and executive stakeholders
• Utilize the latest Falcon features to improve security posture and provide direct feedback to product teams

Requirements:

• U.S. citizenship or Permanent Residency working solely from U.S. soil
• 5-7+ years of applicable experience in a security role implementing and supporting security systems
• Able to thrive in a highly independent work environment
• Ability to research CVEs, assess exploit availability, and leverage threat intelligence to understand real-world vulnerability impact beyond published severity scores
• Strong scripting/development capabilities in one or more common scripting languages, such as Python, Golang, Ruby/Chef, etc
• Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes
• Proven ability to collaborate across engineering, product, and leadership teams to negotiate remediation timelines and communicate risk in business context
• Experience working with Linux and/or other Unix-like variants, cloud platforms (GCP) and highly concurrent systems
• Experience with Kubernetes and containerized applications
• Experience working with developers on security vulnerability impact and remediation efforts
• Hands-on experience with the Falcon platform
• Experience assessing software supply chain risks, open source vulnerabilities, and third-party dependencies for risk-based prioritization decisions