Note: The job is a remote job and is open to candidates in USA. CrowdStrike is a global cybersecurity company focused on protecting organizations from advanced threats. The Security Engineer II will secure the software supply chain and open-source footprint by assessing repositories and dependencies, implementing security controls, monitoring for malicious packages, and automating security operations.
Responsibilities
- Assess risk and provide security guidance to engineers across the company on open-source software usage and repository configurations
- Implement and maintain controls and processes to secure public and private GitHub organizations, including repository guardrails and secret scanning
- Harden open-source code usage, development, ingestion, and distribution across the enterprise
- Investigate open-source dependencies and third-party packages to mitigate supply chain risks (e.g., typosquatting, dependency confusion)
- Advocate for secure coding and open-source compliance practices to the wider engineering organization
- Contribute to the delivery of security initiatives aimed at hardening CrowdStrike’s software supply chain and code-hosting environments
Skills
- Experience working in an engineering role implementing, supporting, and monitoring software security systems
- Strong working experience with GitHub, including repository administration, GitHub Actions, branch protection rules, and access management
- Familiarity with other source control management tools (e.g., BitBucket, GitLab)
- Familiarity with artifact storage tools like Artifactory and S3
- Experience identifying and mitigating open-source risks (SCA, dependency management, licensing risks)
- Experience working with and securing configurations of Linux and/or other Unix-like variants
- Proficiency in one or more common scripting languages, such as Python, Golang, Shell, or JavaScript, to automate security checks
- Domain knowledge of the software development lifecycle (SDLC), secure coding practices, code reviews, and source control security
- Collaborative mindset with experience contributing to cross-team security projects and initiatives
- Experience utilizing AI technologies to enhance decision-making, streamline workflows, or automate vulnerability triage
- Efficient communicator with strong writing skills, comfortable working in a remote environment
- Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes
- Understanding of CI/CD pipelines and associated tools (Jenkins, Argo CD) from an integration and ingestion perspective
- Experience working in and securing configurations of large-scale cloud platforms
- Self-motivated to identify security problems and engage with development teams to find pragmatic solutions
- Experience with common monitoring or log aggregation tools such as LogScale, Splunk, DataDog, Prometheus, etc
Benefits
- Market leader in compensation and equity awards
- Comprehensive physical and mental wellness programs
- Competitive vacation and holidays for recharge
- Paid parental and adoption leaves
- Professional development opportunities for all employees regardless of level or role
- Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
- Vibrant office culture with world class amenities
- Eligibility for bonuses
- Equity grants
- Health insurance
- 401k
- Paid time off
Company Overview