Engineer III, Software Assurance – Product Security

Responsibilities

• Help us protect CrowdStrike and its customers from the most advanced threats by assessing, designing, and implementing security controls and systems associated with all aspects of the software supply chain.
• Perform technical security assessments of current and new pipelines, monitor for emerging vulnerabilities and anomalous system behaviors, create tooling for known gaps, and deploy large-scale security/monitoring systems.
• Responsible for management of cross-cutting projects to further harden internal systems and processes against active and emerging threats.
• Assess risk and provide security guidance to engineers across the company on systems and software implementations.
• Design and implement tools and processes to secure and monitor software build pipelines, including signing.
• Harden open source code usage, development, and distribution.
• Investigate systems and applications to understand and improve security posture.
• Advocate for best-security practices to the entire engineering organization.
• Manage end-to-end delivery of large-scale, cross-cutting security initiatives to harden CrowdStrike software supply chain systems and processes.

Qualifications

• Experience working in an engineering role designing, implementing, and supporting security systems.
• Experience working with and securing configurations of Linux and/or other Unix-like variants.
• Proficiency in one or more common scripting languages, such as shell, Python, Golang, javascript, etc.
• Domain knowledge of networking, software development lifecycle management, secure coding practices and reviews, and system hardening.
• Understanding of software build pipeline applications, systems, and processes.
• Working experience with CICD pipelines and associated tools like Jenkins, Argo CD, etc.
• Experience leading large, cross-team projects and initiatives.
• Familiarity with TLS best practices, ciphers, software signing operations, and public/private key infrastructure implementations and security.