About CrowdStrike

CrowdStrike is a global leader in cybersecurity, protecting people, processes, and technologies that power modern organizations. Since 2011, our mission has remained unwavering: stop breaches. We've redefined security with the world's most advanced AI-native platform, the Falcon platform, serving customers across all industries. Our innovative machine learning and behavioral detection technologies ensure future-proof defense against evolving threats. CrowdStrike's remote-first culture empowers every CrowdStriker with flexibility and autonomy to own their careers, fostering innovation and customer obsession.

Role Overview

The Threat Analyst III role (Remote, Romania) on our Data Science Machine Learning Operations and Response Team combines proactive and responsive threat analysis. Focus on breaches, killchains, malware, and machine learning detections to boost efficacy. Collaborate with Falcon Complete, Falcon Overwatch, Data Scientists, and the Malware Research Center. Analyze predictions across Linux, public clouds, Mac, and Windows, driving improvements in detection accuracy and false positive reduction. Ideal for experts passionate about ML-powered threat hunting in a high-impact environment.

Key Impact Areas

This senior role acts as an escalation point for complex detections, enhancing CrowdStrike's leadership in stopping breaches via the Falcon platform.

Key Responsibilities

Lead efforts to review and refine product detections ensuring they exceed company standards. Identify improvements in false positive management through deep technical analysis. Analyze files and event data across Linux, public clouds like AWS or Azure, Mac, and Windows to validate machine learning predictions. Serve as a senior escalation point for internal teams on customer threat detections. Collaborate cross-functionally with threat research, engineering, and incident response to elevate detection efficacy.

Qualifications & Requirements

Essential: Technical expertise in Linux or Mac operating systems, including internals and threat behaviors. Experience in public cloud environments (AWS/Azure preferred). Strong background in malware reverse engineering, tools, and operations. Proficiency leveraging machine learning for threat detection. Solid Python skills, plus other scripting languages. In-depth binary analysis knowledge (file attributes, imports/exports, packing). Advanced analytical skills in threat research and structured methodologies. Strong threat/risk assessment frameworks. Ability to solve complex security problems actionably. Availability for off-hours cross-region meetings.

Bonus Qualifications

SOC, threat hunting, or incident response experience. Expert MacOS/Linux knowledge with EDR tools. Advanced public cloud control/data plane. Windows internals/API. Targeted intrusion techniques. Exploit development. C/C++/Java/Assembly. GenAI in security. BA/BS or MA/MS in Computer Science, Information Security, or related.

Benefits & Perks

CrowdStrike offers market-leading compensation and equity awards. Enjoy comprehensive physical and mental wellness programs, competitive vacation and holidays for recharge, and paid parental/adoption leave. Our remote-first culture provides flexibility, autonomy, and global collaboration tools. Join a mission-driven team with limitless passion for innovation and customer success.

Career Growth

At CrowdStrike, career ownership is key. Advance in threat analysis, ML operations, or leadership roles within Data Science, Falcon services, or research. Access mentorship, training on cutting-edge Falcon tech, and cross-team projects. Our high-tempo environment hones skills in ML detections, reverse engineering, and cloud security, positioning you as an industry expert.

Why Join CrowdStrike

Be part of the mission to stop breaches with the Falcon platform's AI-native power. Work remotely from Romania in a premium, collaborative culture. Contribute to industry-leading innovations, earn top rewards, and grow with a company ranked #1 in cybersecurity. Your expertise in malware analysis and ML will safeguard global organizations.

Role FAQs

Q: Is this role fully remote? Yes, remote in Romania (ROU).
Q: What platforms will I analyze? Linux, Mac, Windows, public clouds (AWS/Azure).
Q: ML experience required? Yes, leveraging ML for threat detections essential.
Q: Team collaborations? Close work with Falcon Complete, Overwatch, Data Science, Malware Research.
Q: Shift work? Occasional off-hours for cross-region coordination.
Q: Education needed? BA/BS or MA/MS in CS/InfoSec or related.