About the Role:
The CrowdStrike Data Science Team is seeking a motivated professional with good malware analysis skills to do research in the AI Security space. The team is focused on improving the detection capability and efficiency for the Falcon platform through employing Machine Learning algorithms and to research in the AI Security space.
The Threat Researcher will drive our continuous efforts in improving our Machine Learning algorithms and security, by researching for gaps and vulnerabilities and advising data scientists with security knowledge, so we can provide high quality products for our customers.
What You'll Do:
Reverse engineer, write code and help data scientists to better understand the data, in order to improve our Machine Learning algorithms.
Research for blind spots in our ML based detections: file formats, new types of attacks and write blog posts.
Develop tools to assist with automation of analysis tasks.
Be abreast of emerging technologies in the AI security threat space
Work closely with senior leaders to spearhead impactful projects and educate others on the topic, bridging knowledge gaps and gaining widespread support.
What You'll Need:
Preferred 5+ years of proven experience as a Threat Researcher, Security Analyst or similar role in the cybersecurity industry.
Sound understanding of current and emerging threats and ability to demonstrate practical knowledge of security research.
General experience at least in a security operations center or similar environment tracking threat actors.
Fundamental understanding of attributes of binary files on multiple operating systems (Windows, MacOS, Linux).
Knowledge of programming and scripting languages, in particular Python.
Bonus Points:
Good understanding of Windows OS internals and the Windows API.
A minimum knowledge of MacOS and Linux architectures and corresponding executables file structures.
Experience with malware analysis tools and reverse engineering (with IDA Pro, x64dbg).
Programming experience in Python or Rust.
Familiarity with tools used in targeted and criminal intrusions.
Experience with cloud computing platforms (e.g., AWS) and familiarity with containerization technologies (e.g. Docker, Kubernetes) is a plus.
Experience in vulnerability research or as a red teamer is a plus
Knowledge of AI principles and technologies is a plus
BA/BS or MA/MS degree or equivalent experience in Computer Science, Information Security, or a related field
