Skip to main content
CareerApp

Senior Product Security Engineer, Application Security (Remote)

CrowdStrike

USA - Remote · Remote · full time · Senior

$160,000 – $250,000

Listed on CrowdStrike’s own careers site. You apply with them directly — we never stand between you and the employer.

What this role is

A senior security engineer role focused on protecting CrowdStrike's applications from threats by reviewing code, building threat models, and collaborating with product teams to ship secure software. This suits experienced application security specialists comfortable working hands-on with developers across large-scale, complex systems.

Our summary, not CrowdStrike’s wording. The full posting is on their site.

What they ask for

Required

  • 10+ years cybersecurity experience
  • Expertise in identifying security defects
  • Experience with threat modeling frameworks, especially STRIDE
  • Manual secure code review for Go, Python, or JavaScript
  • Browser security knowledge across Chrome, Firefox for desktop and mobile
  • TypeScript, React, Node.js, and Electron experience
  • API endpoint security review and testing
  • Secure configuration of cloud-native and containerized applications in GCP, Azure, or AWS
  • Experience with AppSec tools like SAST, DAST, CSPM, DSPM, ASPM
  • Understanding of software weaknesses beyond OWASP Top 10
  • Application penetration testing experience
  • Cross-team collaboration on technical challenges
  • Automation development for application security tasks
  • Experience using AI technologies to enhance decision-making and workflows

Nice to have

  • Experience at extremely large scale
  • Comfort with ambiguity and self-direction
  • Positive working relationships with product engineers or software development experience
  • Docker and Kubernetes expertise
  • WebAssembly, Kotlin, or Scala experience
  • Contributions to open source security projects
  • Mentoring, coaching, or team culture improvement experience
  • Technical security certifications or academic background

Turn on analytics and we load Google Analytics: Google gets the pages you open and what you do here — searches, jobs you view, jobs you apply to — and sets its own cookies. Leave it off and the only cookies we set are your login, your theme, and this answer. Accept All also records a yes to advertising, which nothing uses yet. Privacy Policy.