Top Cybersecurity Jobs in Seattle, WA

Develop and maintain data-protection features in CrowdStrike Falcon sensor on Windows, working across kernel and user mode. Implement filesystem minifilter drivers, AI-aware detection/protection logic, debug kernel issues, own features end-to-end, and collaborate with cross-functional teams to ship and support endpoint data security capabilities.

Design and implement Windows sensor detection and prevention features for the Falcon platform. Research attack techniques, develop user- and kernel-mode detection logic, own features from design through release, apply secure coding and CI/CD practices, troubleshoot customer issues, and collaborate across teams to improve telemetry and protections.

Analyze malware, intrusions, and telemetry from Windows endpoints to author and tune behavioral detections (IOAs) on the Falcon sensor. Validate detections via telemetry queries, manage lifecycle from development to production, investigate false positives, and collaborate with threat intel and IR teams to prioritize and deploy detection coverage.

Design, implement, and optimize high-performance cross-platform C/C++ components for event processing in the Falcon sensor. Work on kernel-mode development, low-latency systems, concurrency, IPC, memory management and performance tuning across Windows, Mac, and Linux. Integrate features with cross-functional teams, troubleshoot complex issues, mentor teammates, and own deliverables.

Lead product strategy and roadmap for AI-native capabilities in CrowdStrike's Next-Gen SIEM. Collaborate with engineering, data science, research, marketing, sales, and support to design, deliver, and position AI-driven detection, investigation, and prevention features. Conduct competitive analysis, define use cases, and engage customers to inform product direction while supporting go-to-market and cross-functional execution.

Own strategy, roadmap, and delivery for core Falcon sensor capabilities running on endpoints. Collaborate with engineering and cross-functional teams to prioritize, design, roll out, and iterate on sensor features focused on reliability, performance, and security. Define metrics, run discovery and feature lifecycles, coordinate dependencies across Detection Content, Cloud, and NG-SIEM, and ensure safe staged deployments and telemetry-driven decisions.

Design and implement core features for a lightweight macOS security sensor, collaborate cross-platform with teams, own feature lifecycle from design through delivery, debug low-level memory and performance issues, and mentor distributed engineers while aligning sensor architecture with broader Falcon Host strategy.

Develop and maintain CrowdStrike's macOS sensor using C/C++ and Swift. Design and deliver core endpoint features across OS subsystems (file system, memory, process, networking), optimize for concurrency, performance, and reliability, own features end-to-end, collaborate with distributed teams, and troubleshoot customer-reported issues.

Build and maintain end-to-end testing frameworks and tooling for CrowdStrikes cloud and sensor products. Verify component, integration and application-level features, increase automated test coverage, review designs for testability, debug complex distributed systems, contribute to tools and frameworks, and support post-incident root-cause quality improvements and test infrastructure.

Research and implement macOS detection techniques and build them into production endpoint sensor features. Drive projects from concept through release, collaborate cross-functionally, troubleshoot issues, and apply secure, high-performance engineering practices using Swift/C++ and related tools.