Top Cybersecurity Jobs in Seattle, WA

Leads complex, high-severity cybersecurity investigations across endpoint, identity, email, network, and cloud environments. Performs forensic, malware, network, and threat analysis; develops remediation plans; investigates Microsoft 365 attacks; and improves detection and response through automation. Mentors analysts, creates training and SOP content, manages customer escalations, and represents CrowdStrike through thought leadership and external engagements.

Manage and enhance identity infrastructure operations in CrowdStrike’s federal cloud environments. Responsibilities include identity provider operations, application lifecycle management, access troubleshooting, security control compliance, automation, monitoring, alerting, tier 2/3 support, root cause analysis, stakeholder communication, and on-call support. The role focuses on IAM security, scalability, FedRAMP and DoD requirements, and collaboration with Engineering and IT teams.

Leads frontier research and engineering for AI-powered cybersecurity systems. Defines research direction, designs agentic and autonomous security applications, builds evaluation environments, improves systems through feedback and adversarial simulation, and transitions prototypes into scalable production capabilities. Provides technical leadership across teams, mentors senior researchers and engineers, and contributes to research publications, open source, and the broader AI and cybersecurity communities.

Lead product strategy, roadmap, and delivery for Falcon Complete’s internal MDR tooling, including AI-powered investigation and triage, ticketing, case management, and analyst workbench systems. Partner with security operations, analysts, engineering, and data science teams to translate workflows into product requirements, prioritize automation, improve analyst productivity and response times, define success metrics, and enhance customer outcomes.

Conduct sophisticated threat hunting, dark web monitoring, and customer-specific cyber threat intelligence operations. Serve as a trusted customer advisor, research targeted threats, validate security controls using MITRE ATT&CK, prepare intelligence reports, and deliver briefings to stakeholders ranging from SOC analysts to CISOs. Collaborate across teams to develop solutions, respond to customer requests, and improve threat hunting services.

Monitor and respond to real-time security alerts across endpoint, identity, email, and cloud environments. The analyst communicates with customers, investigates EDR telemetry, logs, forensic artifacts, Microsoft 365 threats, BEC, and AITM attacks, and provides remediation guidance. The role also supports incident detection processes and countermeasures while developing cybersecurity, systems administration, network analysis, scripting, and AI-assisted security operations skills. Candidates must work a hybrid 4x10 schedule, including one weekend day.

Lead technical marketing for Falcon Secure Access by creating demos, labs, workshops, and technical content that translate secure access, browser security, Zero Trust, and AI security capabilities into market-facing messaging, sales enablement, and go-to-market strategy. Collaborate cross-functionally to drive adoption and competitive differentiation.

Leads delivery of cybersecurity training across CrowdStrike technologies, manages technical instructors, and oversees coaching, performance, scheduling, budgets, reporting, and resource allocation. Partners with sales and internal teams to scope customer engagements, recommend training, and improve enablement and revenue outcomes. Serves as a technical training subject matter expert, develops courses, analyzes training effectiveness and KPIs, and communicates with executive and technical audiences. Requires cybersecurity expertise, training management experience, LMS and virtual delivery platform proficiency, project management, and occasional travel.

Leads the Cloud Detection Platform organization, strategy, architecture, roadmap, and multiple engineering teams. Owns large-scale detection engines, content delivery infrastructure, reliability, latency, cost, SLOs, capacity, and quota management. Drives unified detection architecture, safe content deployment, testing, observability, and cross-functional roadmap execution while managing organizational planning, talent development, and operational excellence.

Manage a team of TPRM analysts to run the vendor risk lifecycle, improve tooling and automation (ServiceNow TPRM, AI), perform assessments and audits, develop TPRM policies aligned to frameworks (NIST/ISO/SOC 2), partner with procurement/legal/IT, track KPIs, and support audit and reporting to leadership.