Threat Detection Research Engineer (Remote)

About the Team
The CrowdStrike Malware Research Center (MRC) powers Falcon’s advanced malware detection and response capabilities. Our mission is to deeply understand the threat landscape and ensure Falcon is equipped to prevent and detect evolving adversarial techniques. The team blends deep technical expertise with innovation, conducting research that drives improvements across machine learning, behavioral detection, and protection capabilities. MRC partners across engineering, intelligence, and product teams to strengthen our defenses and advance our leadership in the cybersecurity space.

About the Role:
As a Threat Detection Research Engineer, you will play a hands-on role in identifying, analyzing, and mitigating threats targeting our customers. You’ll work with threat intelligence, behavioral data, and malware samples to assess impact and develop defensive strategies. Your work will support both immediate threat response and the long-term evolution of Falcon’s detection systems.
 

In this role, you'll be expected to reverse engineer malware, understand adversary tradecraft, and produce actionable detection logic. You'll contribute to automation projects that scale threat analysis and provide rapid response capabilities. Collaborating with response and engineering teams, you'll help convert research into scalable detection improvements and practical security outcomes.

What You'll Do:

• Analyze malware and adversary techniques using execution, behavioral analysis, and reverse engineering.

• Validate threats and provide mitigation guidance to improve Falcon’s detection and protection capabilities.

• Reverse engineer malicious code and exploits to extract TTPs and support threat

• attribution and mitigation.

• Communicate technical threat intelligence effectively to cross-functional teams.

• Contribute to the development and prioritization of automation for threat analysis workflows.

• Build small-scale tools or proof-of-concepts to demonstrate detection or mitigation strategies.

• Stay current with threat landscape developments and contribute insights to enhance detection coverage.

What You'll Need:

• 5+ years of experience in threat detection, malware analysis, or security research.

• Proficiency in reverse engineering, disassembly, and behavioral threat analysis.

• Solid understanding of OS internals (Windows, Linux, or macOS) and malware execution behaviors.

• Familiarity with adversary tradecraft, including techniques mapped to the MITRE

• ATT&CK framework.

• Experience scripting or coding in languages such as Python, C/C++, or Go.

• Ability to translate technical threat findings into clear, actionable intelligence.

• Experience collaborating with engineering teams to implement detection or automation enhancements.

• Demonstrated curiosity and drive to innovate in the evolving threat landscape.

#LI-Remote

#LI-RC1