Top Cybersecurity Jobs in Seattle, WA

Lead design and implementation of the CrowdStrike Falcon Host endpoint sensor across Windows, macOS, and Linux. Architect and deliver cross-platform features touching file system, memory, process, and networking subsystems. Own features end-to-end, debug low-level issues, mentor teammates, collaborate with distributed teams, and apply AI to improve detection and decision-making.

Analyze low-level Windows software behavior in user and kernel mode using memory dumps, registers, disassembly, and source code. Conduct reverse engineering investigations, identify root causes, communicate evidence-based findings, and partner with development teams on reliability improvements. Build tooling and automation for runtime analysis, diagnostics, validation, and debugging while collaborating with globally distributed engineering teams.

Design and implement Windows sensor detection and prevention features for the Falcon platform. Research attack techniques, develop user- and kernel-mode detection logic, own features from design through release, apply secure coding and CI/CD practices, troubleshoot customer issues, and collaborate across teams to improve telemetry and protections.

Senior backend engineer on the cloud Platform auth team building high-scale authentication and authorization services. Lead design and implementation of distributed systems, APIs, storage, and performance optimizations; mentor engineers; apply engineering best practices and AI to improve decision-making and scalability.

Design and build scalable test automation frameworks and cloud-based test infrastructure for authentication/authorization services. Create test strategies for security-critical features, simulate real-world deployments, drive root-cause analysis, mentor engineers, and collaborate across teams to improve quality, performance, and resilience of distributed cloud systems.

Lead product strategy and roadmap for AI-native capabilities in CrowdStrike's Next-Gen SIEM. Collaborate with engineering, data science, research, marketing, sales, and support to design, deliver, and position AI-driven detection, investigation, and prevention features. Conduct competitive analysis, define use cases, and engage customers to inform product direction while supporting go-to-market and cross-functional execution.

Develop and maintain CrowdStrike's macOS sensor using C/C++ and Swift. Design and deliver core endpoint features across OS subsystems (file system, memory, process, networking), optimize for concurrency, performance, and reliability, own features end-to-end, collaborate with distributed teams, and troubleshoot customer-reported issues.

Analyze malware, binary files, customer detection tickets, and machine learning detections to improve detection efficacy and reduce false positives. Review product detections, assess binary legitimacy, address internal detection questions, and provide insights to data science teams. The role collaborates with technical account managers, incident response teams, data scientists, and malware researchers. Required capabilities include malware analysis, reverse engineering, Python scripting, binary fundamentals, threat assessment, research methods, operating systems, and AI-assisted workflow improvement.

Conduct incident response engagements, intrusion investigations, threat hunting, and host or network forensics across Windows, Mac, and Linux. Analyze malware and network activity, support remediation planning, and investigate targeted attacks. Prepare written and verbal findings for customers, regulators, management, and legal counsel. Consultants also collaborate with project leaders and internal teams while using AI technologies to improve workflows and decision-making.

Lead incident response consulting engagements, including client scoping, forensic and malware investigations, threat hunting, remediation planning, and executive communications. Coach junior analysts conducting host and network forensics across Windows, macOS, and Linux. Develop recommendations to improve clients’ security posture, produce reports for stakeholders and legal counsel, contribute thought leadership, and travel up to 30% as needed.