Security Researcher, Data Ops

About The Role:

CrowdStrike is looking for a self-starting, responsible, action-oriented, and highly motivated Security Researcher, Data Ops to join our Counter Adversary Operations team. This position will require the candidate to collect and analyze data from the cybercriminal underground that could impact the security and privacy of CrowdStrike customers and their users.

A successful candidate will be an operational security (OPSEC)-savvy, detail-oriented problem solver, and with an interest in data collection and analysis. Highly qualified candidates will have a technical foundation, and experience in cyber threat intelligence.

What You'll Do:

• Complete technical collections projects including acquisition, monitoring, and analysis of deep and dark web data.
• Collect and ingest data from websites by developing scrapers and scripts to work with APIs and databases.
• Build, deploy, and maintain tools and services with Docker, Git, and automated pipelines.
• Investigate logs to identify and fix code issues, ensuring collection tools can adapt and keep up with an evolving criminal ecosystem.
• Employ secure operational tradecraft methods and practices.
• Conduct proactive research into underground cybercriminal economies and how threat actors are exploiting or abusing emerging technologies.
• Collaborate closely with multiple and various stakeholders of CrowdStrike’s global Counter Adversary Operations team.

Required: What You'll Need:

• Professional experience in cyber threat intelligence, open source intelligence, or information security.
• Proficiency in at least one general-purpose programming language such as Python, and experience with developing tools for data extraction, webscraping, and interacting with databases.
• Familiarity with Docker, Git, and general web technologies including HTTP, HTML, and JavaScript.
• Familiarity or experience with common logging tools like Splunk or Logscale.
• Familiarity with Python and open source tools to scrape, parse, and work with data e.g. pandas, requests, SQL, beautifulsoup.
• Ability to interact with RESTful and other types of APIs for both data retrieval and developing new tools.
• Confidence in navigating large datasets and conducting exploratory data analysis using statistical methods to find needles in a haystack.
• Appreciation for CrowdStrike’s mission and principles around security, trust and safety, and privacy.
• Practical knowledge of operational security (OPSEC) principles and best practices.
• Ability to work remotely, in a collaborative team environment across different time zones.

Preferred:

• Additional language expertise (Russian, Mandarin, Korean, Spanish, Farsi, Arabic, Japanese, French, Hindi, Urdu or others).
• Prior intelligence community or cyber threat intelligence background.
• Demonstrated engagement in the security community, academic research community, CTFs, or contributing to open source software development.
• Interest or experience in leveraging machine learning, generative AI applications, and LLMs to automate workflows and understand large datasets.
• Undergraduate degree, or equivalent experience, in information security, cybersecurity, computer science, data science, intelligence studies or a related field.
• Other technical security certifications or research background is a plus.

Benefits Of Working At CrowdStrike:

• Market leader in compensation and equity awards
• Comprehensive physical and mental wellness programs
• Competitive vacation and holidays for recharge
• Paid parental and adoption leaves
• Professional development opportunities for all employees regardless of level or role
• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
• Vibrant office culture with world class amenities
• Great Place to Work Certified™ across the globe

Key skills/competency

• Cyber Threat Intelligence
• Open Source Intelligence (OSINT)
• Python Programming
• Web Scraping
• Data Analysis
• Operational Security (OPSEC)
• Docker & Git
• API Interaction
• Splunk/Logscale
• Deep/Dark Web Research