As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We’re also a mission-driven company. We cultivate an inclusive culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Our University Recruiting program is dedicated to attracting and cultivating the future leaders of this industry. This program offers paid positions for students and recent grads, designed to provide exposure to work that makes an impact while being supported through a structured experience with seasoned professionals. Ready to join a mission that matters? The future of cybersecurity starts with you.
About the Role:
This is a highly technical position on one of two teams within the Technical Analysis Cell (TAC), at the forefront of CrowdStrike's mission against nation state and criminal adversaries. Both teams are tasked with investigating, reconstructing and reverse engineering newly discovered, malicious artefacts and documenting analysis results as a stream of intelligence reporting. We are often the first to analyze previously unknown threats. One team encounters mobile malware (primarily APKs); The other team analyses cloud activity logs; We respond quickly when needed and perform equally well at conducting detailed analysis. Communication and collaboration with other teams of CrowdStrike is highly important to facilitate this.
As distributed international teams, we are looking for an energetic self-starter with the ability to take ownership and be accountable for deliverables while at the same time supporting and helping to improve upon our analysis workflow. If you'd like to work with passionate people in a fast-paced, team-oriented environment, you've come to the right place!
Depending on the candidates aptitude we can offer a role on one of two teams: The Mobile Mission or the Cloud Mission
What You’ll Do:
Maintain a detailed understanding of the technical details of cloud intrusions through analyzing cloud provider activity logs, such as AWS CloudTrail and Azure Activity Logs.
Convert your understanding to an intelligence report
What You’ll Need:
Familiarity with at least one cloud service provider (AWS, Azure, GCP) as a user e.g., creating identities
Investigative mindset
Team player: someone who is eager to help, teach, and learn from others
Strong problem-solving skills
Independent Learner
Bonus Points:
Knowledge of programming and scripting languages, in particular Python
Ability to express complex technical and non-technical concepts
Understanding of identity and access management for at least one major cloud service provider (AWS, Azure, GCP)
Familiarity with at least one major cloud service provider’s (AWS, Azure, GCP) cloud activity logs e.g. CloudTrail, Azure Activity logs, GCP Audit Logs
What You’ll Do:
Create tools to automate analysis tasks and tracking of threat actors.
Contribute to active mitigation efforts with technical expertise.
Track relations between new threats and existing actors using in-house tools.
Document threat evolutions and intelligence gaps for the broader Intelligence Team.
Create host-based and network-based signatures suited for large-scale hunting, detection, and tracking of threats.
What You’ll Need:
Team player: someone who is eager to help, teach, and learn from others
Malware-analysis or knowledge of reverse-engineering principles
First exposure to analysing malware targeting mobile devices
Ability to reconstruct incidents based on cloud activity logs from at least one major cloud service provider (AWS, Azure, or GCP)
Strong problem-solving skills
Ability to express complex technical and non-technical concepts
Ability to learn new analysis techniques quickly, especially when faced with less-common file types
Solid writing skills
Knowledge of programming and scripting languages, in particular Python
Bonus Points:
Solid understanding of mobile platforms
Dynamic instrumentation frameworks
Experience identifying and classifying malicious tooling through development of signatures that can be used for tracking and hunting purposes
Familiarity with at least a couple of the following tools and languages;
IDA
Ghidra
JEB
WinDbg
x86dbg/x64dbg
Parallels or Virtual Box
Java
C/C++
Rust
Golang
C#
.NET
This is a 12 week internship commencing on Monday 2nd June and completing on Friday 22nd August.
#LI-Remote
#LI-RM1
What You Can Expect:
Remote-friendly and flexible work culture
Market leader in compensation and equity awards
Paid holidays (including birthday holidays) and 401k matching
Professional development opportunities including workshops, tech talks, and Executive Speaker Series
Assigned mentors from across the company for continuous support and feedback
Participation in companywide initiatives including ERGs, FalconFIT, Wellness Programs, and Employee Assistance Program
Employee Resource Groups, geographic neighbourhood groups and volunteer opportunities to build connections
Vibrant office culture with world class amenities
Ownership of impactful projects that move the company forward
Great Place to Work Certified™ across the globe
CrowdStrike is proud to be an equal opportunity and affirmative action employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. Our approach to cultivating a diverse, equitable, and inclusive culture is rooted in listening, learning and collective action. By embracing the diversity of our people, we achieve our best work and fuel innovation - generating the best possible outcomes for our customers and the communities they serve.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at recruiting@crowdstrike.com for further assistance.