# Engineer II, Threat Detection - Windows (Hybrid)

Hiring organization: [CrowdStrike](https://career.thegoodapps.co/organizations/crowdstrike)

Canonical page: https://career.thegoodapps.co/jobs/c8f9dbbf-564a-43da-973c-b8cac166c9db

Listed on CrowdStrike's own careers site. Applications go to them directly.

- Employment type: full time
- Seniority: Mid
- Salary: 100000 – 145000 USD per year

## Summary

This role analyzes emerging threats and malware to build behavioral detection rules that protect CrowdStrike's customers at scale. It suits security engineers who enjoy hands-on threat analysis and can translate attack patterns into detection logic across Windows endpoints.

_Our summary, not CrowdStrike's wording._

## Skills named

Endpoint Detection And Response, PowerShell, Python, Regular Expressions

## Required

- U.S. citizenship or permanent resident status eligible for CJIS clearance
- Bachelor's degree in information security, computer science, or related field, or 4+ years equivalent hands-on experience
- Experience with endpoint detection platforms or EDR tooling
- Proficiency in Windows OS internals and APIs
- Experience with behavioral malware analysis and sandboxing
- Knowledge of regular expressions for pattern-based detection
- Ability to read programming languages and PowerShell
- Python scripting for automation and analysis
- Experience analyzing endpoint telemetry to identify malicious patterns
- Knowledge of adversary TTPs and MITRE ATT&CK framework
- Ability to assess threat intelligence for detection opportunities
- Comfortable using AI-assisted tooling
- Self-starter mentality with ownership of deliverables
- Clear written and verbal communication skills
- Experience using AI technologies to enhance workflows
- Comfortable with on-call rotation

## Nice to have

- Experience writing behavioral detection rules or signatures for endpoint security products
- Regex optimization and pattern matching experience
- Knowledge of detection precision concepts and false positive analysis
- Experience with detection content lifecycle management
- Understanding of behavioral detection paradigms and living-off-the-land techniques
- Experience in a security operations center
- Experience building test environments and lab automation
- Familiarity with agentic AI CLIs for detection engineering
- Open-source contributions or published security research

Apply on CrowdStrike's site: https://crowdstrike.wd5.myworkdayjobs.com/en-US/crowdstrikecareers/job/USA---Sunnyvale-CA/Engineer-II--Threat-Detection---Windows--Hybrid-_R29387