CrowdStrike is seeking a Product Security Engineer to join its Product Security team to help secure its applications from design through deployment. In this role you will analyze web applications to identify design and implementation flaws, assist product engineers in fixing defects, and contribute to shipping secure code while addressing active and emerging threats. You will hunt for security defects and implement fixes rather than just reporting them, and participate in cross-cutting projects to harden internal systems and processes. Responsibilities include: collaborating with engineering teams to influence product design and security capabilities; creating and maintaining threat models (STRIDE) to minimize the threat surface; reviewing application code in Go, Python, or Java for security defects; testing applications throughout the Secure Development LifeCycle; working with developers to explain defects and risks and to implement proven solutions; building automation and tooling to streamline security tasks; responding to the bug bounty program and improving the security of CrowdStrike applications. Requirements include: a solid understanding of software development in Agile/DevOps environments; experience with STRIDE threat modeling; code review experience in Go, Python, or Java; knowledge of secure configuration of cloud-native and containerized apps in one or more cloud environments (GCP, AWS, Azure); experience with AppSec tools (SAST, DAST, CSPM, DSPM, ASPM); understanding of common weaknesses affecting cloud and web apps beyond OWASP Top 10 and experience in appli

CrowdStrike is seeking a Product Security Engineer to join its Product Security team to help secure its applications from design through deployment. In this role you will analyze web applications to identify design and implementation flaws, assist product engineers in fixing defects, and contribute to shipping secure code while addressing active and emerging threats. You will hunt for security defects and implement fixes rather than just reporting them, and participate in cross-cutting projects to harden internal systems and processes. Responsibilities include: collaborating with engineering teams to influence product design and security capabilities; creating and maintaining threat models (STRIDE) to minimize the threat surface; reviewing application code in Go, Python, or Java for security defects; testing applications throughout the Secure Development LifeCycle; working with developers to explain defects and risks and to implement proven solutions; building automation and tooling to streamline security tasks; responding to the bug bounty program and improving the security of CrowdStrike applications. Requirements include: a solid understanding of software development in Agile/DevOps environments; experience with STRIDE threat modeling; code review experience in Go, Python, or Java; knowledge of secure configuration of cloud-native and containerized apps in one or more cloud environments (GCP, AWS, Azure); experience with AppSec tools (SAST, DAST, CSPM, DSPM, ASPM); understanding of common weaknesses affecting cloud and web apps beyond OWASP Top 10 and experience in appli