Sr. Security Research II, DataOps (Remote)

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role:

CrowdStrike is looking for a self-starting, responsible, action-oriented, and highly motivated Senior Security Researcher II to join our Counter Adversary Operations team. This position will require the candidate to collect and analyze data from the cybercriminal underground that could impact the security and privacy of CrowdStrike customers and their users.

This role sits at the intersection of threat intelligence, software engineering, and AI-augmented operations. You'll maintain collection infrastructure at scale, develop intelligent automation systems, and respond rapidly to customer-impacting incidents.

A successful candidate will be an operational security (OPSEC)-savvy, detail-oriented problem solver, and have substantial experience driving concurrent projects and issues to completion with minimal direction.

Highly qualified candidates will have an excellent technical foundation, experience in cyber threat intelligence, and a track record of building production-grade automation systems.

What You'll Do:

• Complete technical collections projects including acquisition, monitoring, and analysis of deep and dark web data

• Design and implement AI-powered automation systems including custom Claude Code skills, MCP servers, agent workflows, and harnesses that integrate LLM capabilities with collection infrastructure

• Maintain collection reliability across high-volume internet sources, responding rapidly to site structure changes, authentication failures, and anti-bot protections

• Respond to customer-impacting collection gaps and data quality issues with rapid diagnosis and resolution

• Build, deploy, and maintain collection services, worker processes, data pipelines, and APIs in Docker and cloud environments

• Conduct proactive research into underground cybercriminal economies and how threat actors are exploiting or abusing emerging technologies

• Employ secure operational tradecraft methods and practices

• Collaborate closely with multiple and stakeholders across CrowdStrike's global Counter Adversary Operations team

Software Development & Automation:

• Proficient in at least one general-purpose programming language such as Python, and experience with developing tools for data extraction, web scraping, and interacting with databases.

• Experience building AI-powered automations, custom skills, plugins, or agent harnesses that integrate LLM capabilities with production infrastructure.

• Demonstrated ability to design deterministic workflows for complex operational tasks including data collection orchestration, failure detection, and automated remediation.

• Proven ability to design, implement, and interact with RESTful and other types of APIs for both data retrieval and system integration.

• Experience building, deploying, and maintaining tools and services in Docker for internal and external users.

• Familiarity with version control (Git), CI/CD pipelines, and collaborative software development practices.

• Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.

Data Analysis:

• Experience designing and leading data-driven investigations, and visualizing results, to communicate actionable findings.

• Confidence in navigating large datasets of unique, unstructured data and preparing it for analysis, and using statistical methods to find needles in the haystack.

Domain Knowledge:

• Familiarity with the online threat landscape ranging from social media, to underground forums to ransomware/DLS ecosystems.

• Practical knowledge of research collection tradecraft, including operational security (OPSEC) principles and best practices.

• Appreciation for CrowdStrike's mission and principled in the concepts of security, trust and safety, and privacy.

Collaboration & Communication:

• Ability to work remotely, in a collaborative team environment across different time zones.

• Customer service orientation with experience managing stakeholder expectations during high-pressure incidents.

Bonus Points:

• Additional language expertise  (Russian, Mandarin, Korean, Spanish, Farsi, Arabic, Japanese, French, Hindi, Urdu or others).

• Prior intelligence community or cyber threat intelligence background.

• Demonstrated engagement in the security community, academic research community, or open source software development.

Education:

• Undergraduate degree, or equivalent experience, in information security, cybersecurity, computer science, data science, intelligence studies or a related field.

• Other technical security certifications or research background is a plus.

#LI-Remote
#LI-EV1

Benefits of Working at CrowdStrike:

• Market leader in compensation and equity awards

• Comprehensive physical and mental wellness programs 

• Competitive vacation and holidays for recharge  

• Paid parental and adoption leaves

• Professional development opportunities for all employees regardless of level or role

• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections

• Vibrant office culture with world class amenities

• Great Place to Work Certified™ across the globe

CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.

CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements.

If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at [email protected] for further assistance.

Find out more about your rights as an applicant.

CrowdStrike participates in the E-Verify program.

Notice of E-Verify Participation

Right to Work

For detailed information about the U.S. benefits package, please click here.