Top Cybersecurity Jobs in New York City, NY

Analyze in-the-wild exploits and perform deep reverse engineering to track adversaries. Build detection, automation, and classification frameworks; develop host/network signatures and tooling. Produce high-quality intelligence reports and briefings, collaborate across teams, and contribute to mitigation and large-scale hunting efforts.

Lead strategy and execution for CrowdStrike's Identity Protection product: detect and prioritize identity risk across human and non-human identities, define identity graph models, drive remediation automation and verification, and surface identity risk across the security stack. Use AI agents and rapid prototyping to iterate specs and partner with engineering, customers, and stakeholders to deliver usable identity risk solutions.

Lead a team building petabyte-scale, multi-region data ingestion for NG-SIEM. Own roadmap, OKRs, SLOs, operational excellence, cross-team collaboration, and stakeholder engagement while optimizing availability, performance, and cost.

Design and build scalable test automation frameworks and cloud-based test infrastructure for authentication/authorization services. Create test strategies for security-critical features, simulate real-world deployments, drive root-cause analysis, mentor engineers, and collaborate across teams to improve quality, performance, and resilience of distributed cloud systems.

Develop Go-based microservices and REST APIs for CrowdStrike's Cloud Security Posture Management platform. Own end-to-end delivery, follow engineering best practices, use event-driven workflows (Kafka), and store data in Cassandra/Elasticsearch/Postgres. Operate production services (on-call), deploy containers in Kubernetes with Helm, and work with cloud providers and infrastructure-as-code tools to secure cloud workloads.

Lead product strategy and roadmap for AI-native capabilities in CrowdStrike's Next-Gen SIEM. Collaborate with engineering, data science, research, marketing, sales, and support to design, deliver, and position AI-driven detection, investigation, and prevention features. Conduct competitive analysis, define use cases, and engage customers to inform product direction while supporting go-to-market and cross-functional execution.

Deploys, configures, optimizes, and supports the CrowdStrike Falcon platform and related applications for enterprise customers. Responsibilities include troubleshooting, software deployment engineering, API scripting, integrations, vulnerability and asset management support, incident response deployment assistance, customer project planning, technical workshops, mentoring, and collaboration with customer IT and internal services teams. Travel may reach 25%.

Perform red team engagements, penetration tests, adversary emulation, and threat actor simulations across operating systems, applications, databases, and networks. Plan and execute assessments, identify vulnerabilities, produce executive and technical reports, provide security recommendations, and support customers during crisis scenarios. Collaborate with leadership and technical teams, improve information security programs, operate with an OPSEC mindset, and use automation, scripting, and AI technologies to enhance assessment effectiveness.

Delivers virtual and occasional onsite cloud security training covering Falcon Cloud Security, CNAPP, CSPM, CWPP, containers, and incident response. Develops curricula, certification exams, and hands-on labs; maintains expertise in cloud threats and CrowdStrike products; and supports broader endpoint, identity, logging, and SIEM topics. Requires strong technical education, cloud security, communication, project management, AI technology, and occasional travel experience.

Build and maintain scalable cybersecurity data infrastructure, distributed systems, and tools supporting OverWatch threat hunting across trillions of events. Develop web services and processing pipelines, integrate research projects into production, improve analyst workflows, and operate highly available cloud systems. Responsibilities include DevOps ownership, on-call support, testing, code reviews, open-source collaboration, and working with a distributed remote team.