Software Engineer

About the Role

CrowdStrike Falcon is a two-component security product. One component is the "Sensor" — a lightweight agent installed on endpoint systems that observes system activity, recognizes malicious behavior, provides on-box prevention capability, and sends telemetry to the Falcon cloud. The cloud component aggregates Sensor telemetry across each customer's network, correlates malicious behavior across machines, and presents security teams with a prioritized summary of the threats detected in their environments. The Falcon Sensor runs on tens of millions of endpoints worldwide, across Windows, macOS, and Linux, in both user mode and kernel mode.

Engineering software at that depth and that scale is among the hardest problems in the industry, and CrowdStrike holds the Sensor to an exceptionally high standard of quality, performance, and engineering rigor. Sustaining that standard requires a team with true mastery of what software does at runtime, at the lowest levels of the stack. That team is Sensor Performance and Reliability — CrowdStrike's team of debug engineers. Deep runtime analysis is their craft: postmortem memory dump analysis, disassembly and reverse engineering, and source-level analysis, used to explain with precision and evidence how low-level code behaves on real systems.

This role is for an entry-level engineer to join the Sensor Performance and Reliability team. The team will teach the necessary skills in Windows internals, assembly, and reverse engineering.

Location

• Hybrid role based out of Redmond, WA or Sunnyvale, CA, with a combination of in-office and remote work.

Key Responsibilities

• Analyze the runtime behavior of complex low-level software across user mode and kernel mode on Windows, primarily through postmortem memory dump analysis in WinDbg.
• Work from raw memory, register state, and disassembly to a precise, evidence-backed account of what executing code did and why.
• Correlate analysis with source code, applying reverse engineering and disassembly techniques where symbols, source, or context are incomplete.
• Drive investigations to accurate, well-reasoned conclusions and communicate confidence and uncertainty honestly.
• Partner with Sensor development teams to translate findings into concrete, well-designed engineering improvements.
• Generalize from individual investigations: recognize patterns, and champion improvements to tooling, diagnostics, automated validation, and engineering practices.
• Build and improve the tooling, automation, and analysis techniques that make deep runtime analysis faster, more repeatable, and more accessible.
• Write clearly and precisely for engineering, quality, and leadership audiences.
• Collaborate with engineering teams across multiple locations and timezones.

Requirements & Tech Stack

• BS in Computer Science, Computer Engineering, or equivalent practical experience.
• Solid working knowledge of C and C++, and the ability to read and reason about code.
• Good foundational knowledge of data structures and algorithms.
• Strong problem-solving and analytical skills, and comfort working with incomplete information.
• Genuine curiosity about systems fundamentals: operating system internals, computer architecture, memory management, concurrency, compilers, and assembly.
• Persistence and intellectual honesty.
• Good written and verbal communication skills.
• Ability to take ownership of work and follow it through to resolution.
• Ability to communicate, collaborate, and work effectively in a globally distributed team.
• Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes.

Bonus Points

• Any exposure to debugging tools and techniques — WinDbg, GDB, LLDB, or similar — including as a hobby, in coursework, or in CTFs.
• Coursework, internships, or personal projects involving operating system internals, kernel or driver development, systems programming, or computer architecture.
• Familiarity with x86-64 or ARM64 assembly and the ability to read disassembly.
• Exposure to reverse engineering, malware analysis, or vulnerability research.
• Experience with Windows internals specifically (processes, threads, virtual memory, synchronization, the Windows kernel and driver model).
• Scripting experience, particularly Python, for automation and analysis tooling.
• Interest in or experience with the security landscape.