Sr. Security Engineer III (Remote)
crowdstrikeWashington (DC)
Sr. Security Engineer III (Remote)
Posted today
crowdstrikeWashington (DC)
SENIORITY
Senior
About the role
Overview:
In this role, you design and implement automation, tooling, and engineering capabilities to strengthen CrowdStrike's internal security operations. You’ll work within CSIRT via the TIDE team to enable rapid detection, investigation, and response through scalable solutions and integrations. You’ll tackle operational challenges, automate workflows, and develop detections and response pipelines, contributing to a robust, AI-enabled security program. This is a chance to impact security at scale by improving efficiency and reducing false positives in a mission-driven environment. Compensation / Benefits market leader in compensation and equity awards wellness programs (physical and mental) competitive vacation and holidays paid parental and adoption leaves professional development opportunities employee networks and volunteer opportunities to build connections
Responsibilities:
Identify operational challenges with Incident Response Operations and engineer scalable solutions Automate repetitive investigational and response workflows to speed incident handling Design solutions to enrich security data and streamline analyst workflows Build capabilities to enhance visibility and reduce operational overhead for responders Design, implement, and maintain detections across various technologies and data sources Improve detection fidelity and actionable alert quality by reducing false positives Develop and maintain detection, enrichment, and response pipelines for scalable security operations Collaborate with Threat Intelligence to operationalize intelligence through detections and automation Develop automation, integrations, and internal tooling to improve security operations Build and maintain integrations between security platforms, cloud services, and internal systems Engineer cloud-native capabilities using CI/CD, Infrastructure as Code, and modern software practices Contribute to engineering standards, documentation, and continuous improvement
Key requirements:
Hands-on incident response experience in SOC/CSIRT/IR teams Proficiency in Python, Go, or other modern programming languages Experience building automation, APIs, or systems integrations Experience with cloud platforms such as AWS, Azure, or Google Cloud Knowledge of Linux, networking, authentication, and enterprise security technologies Strong analytical, troubleshooting, and communication skills Experience building CI/CD pipelines (GitLab CI, GitHub Actions, Jenkins) Experience with Docker, Kubernetes, Terraform, or other IaC tools Experience with SIEM, EDR, SOAR, identity, or cloud security platforms Experience with security telemetry, log analytics, or detection engineering Familiarity with MITRE ATT&CK, threat hunting, or threat intelligence Experience applying AI/ML to security operations and engineering workflows Proven use of AI technologies to enhance decision-making, streamline workflows, and drive outcomes Strong analytical thinking Troubleshooting mindset Effective communication Python or Go programming Automation, APIs, and systems integrations Cloud platforms: AWS, Azure, Google Cloud
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.