Principal Cloud Security Researcher

Job not on LinkedIn

🔥 6 minutes ago

🦬 Wyoming – Remote

🦬 Wyoming – Remote

💵 $195k - $310k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 31 days.

Apply Now

Find Similar Remote Jobs

CrowdStrike

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 2011

🔒 Cybersecurity

☁️ SaaS

🤖 Artificial Intelligence

Cybersecurity • SaaS • Artificial Intelligence

CrowdStrike is a cybersecurity company that provides cloud-based security services to stop breaches. It is recognized as a leader in endpoint protection, identity and cloud security, and managed detection and response. CrowdStrike's platform, Falcon, integrates artificial intelligence to offer real-time visibility, detection, and protection against sophisticated cyber threats. The company is lauded for its effectiveness in securing networks and data, making it a trusted partner for businesses worldwide.

📋 Description

• Set research direction across all cloud content and own the technical vision for cloud threat research across control plane, identity, workloads, and Kubernetes on AWS, Azure, and GCP • Lead offensive cloud and attack-path research into novel attack techniques, privilege escalation paths, credential access methods, cross-account and cross-tenant abuse, and identity trust weaknesses • Model attacker chains involving misconfigurations, permissions, and exposures and turn them into detection coverage • Shape agentic red teaming by defining attack techniques, tradecraft, scenarios, attack-path generation and validation, and scoring • Guide agentic detection and response using cloud audit, control-plane telemetry, identity signals, and runtime events • Investigate real cloud intrusions, supply chain campaigns, and emerging tradecraft with Counter Adversary Operations, Office of Adversary Strategy, Falcon Complete, and incident response • Research the AI attack surface involving AI services, model APIs, agent frameworks, and non-human identities • Apply automation and large language models to attack-path discovery, threat intelligence triage, detection prototyping, and validation • Influence product and platform direction by identifying gaps in cloud telemetry, coverage, and platform capabilities • Collaborate with product management, cloud engineering, and platform teams • Publish original research, speak at industry conferences, contribute to open-source and community efforts, and engage with cloud service providers • Mentor researchers and detection engineers and review research, detection logic, and remediation content

🎯 Requirements

• Extensive experience writing production detection content across multiple platforms or data domains • Deep understanding of different telemetry sources, their limitations, and where coverage breaks down • Ability to reason about threats spanning endpoint to cloud, identity to SaaS, and network to runtime • Experience designing or contributing to detections that correlate signals across boundaries • Current knowledge of threat actors, campaigns, and TTPs • Ability to translate threat intelligence into detection requirements and prioritization decisions • Experience with detection content lifecycle, including aging rules, false-positive drift, performance cost, and deprecation decisions • Ability to work across multiple teams, drive alignment, and articulate detection strategy to engineers and leadership • Experience guiding or mentoring engineers on detection quality, reviewing detection content at scale, or setting technical standards for a detection engineering function • Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes • Ability to periodically undergo and pass additional background and fingerprint checks consistent with government customer requirements • Experience applying AI/LLM to detection or security operations workflows • EDR or SIEM vendor-side product experience • MITRE ATT&CK fluency across multiple platforms • Published security research, including blogs, conference talks, tools, or CVEs • Malware analysis or reverse engineering background • Experience quantifying detection efficacy, including precision, recall, and bypass resistance

🏖️ Benefits

• Market leader in compensation and equity awards • Comprehensive physical and mental wellness programs • Competitive vacation and holidays for recharge • Paid parental and adoption leaves • Professional development opportunities for all employees regardless of level or role • Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections • Vibrant office culture with world class amenities • Bonuses • Equity grants • Health insurance • 401k • Paid time off

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume