Platform Security Engineer

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We’re also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About this Role:
As a Platform Security Operations Engineer, you’ll support incident response and threat hunting teams by building, maintaining, and optimizing the infrastructure and tooling needed for effective threat detection, investigation, and response. You’ll automate security workflows and ensure the reliability of security platforms while improving detection and response capabilities.

Key Responsibilities – What You’ll Do:

Security Platform Engineering

• Implement automated threat intelligence platforms and integrations

• Design and maintain threat hunting infrastructure and tools

• Automate incident response workflows and playbooks

Detection Engineering Support:

• Develop and maintain infrastructure for detection engineering workflows

• Create automated testing environments for detection rules

• Build CI/CD pipelines for detection deployment

• Implement automated validation of detection quality

• Support threat hunting infrastructure needs

Incident Response Infrastructure:

• Maintain emergency response platforms and tools

• Implement automated containment and response capabilities

Automation & Integration:

• Automate routine security operations tasks

• Develop custom integration between security tools

• Create self-service security tooling for IR teams

• Build automated reporting and metrics collection

What You’ll Need:

Education & Experience:

• Bachelor’s degree (or equivalent experience) in a computer-related field

• 8+ years of DevOps/Platform Engineering experience

• US Citizenship required due to direct work on GovCloud

Technical Expertise:

• Python/Go programming

• MITRE ATT&CK Framework

• Incident response process

• Threat hunting methodologies

• Security data analysis

• Cloud platforms (AWS, Azure, GCP)

• Log aggregation and processing

• SIEM platforms (Splunk, ELK)

• Infrastructure as Code (Terraform, Ansible)

• Git and CI/CD pipelines

• Containerization (Docker, Kubernetes)

Analytical & Communication Skills:

• Excellent investigative, analytical, and problem-solving abilities

• Ability to maintain strict confidentiality and operate independently in high-pressure situations

Bonus Points

• Scripting knowledge (e.g., Python, Perl, Bash, PowerShell)

• Familiarity with Splunk or other advanced SIEM platforms

• Familiarity with agile project management and compliance frameworks

• Technical security certifications or advanced academic credentials

• SOAR platforms

• EDR platforms

• Threat intelligence platforms