Senior Security Researcher at CrowdStrike conducting cloud and Linux security research. Analyzing threats and developing advanced security models to protect cloud environments.
Responsibilities
Initiate and conduct Cloud Research Initiatives: follow the threat landscape to identify trends in the realm of cloud infrastructure security, threat actors, novel attack approaches, and vulnerabilities in cloud-based and/or cloud-native environments and workloads.
Conduct cutting edge research in the areas of Linux security (low level and high level operating system research) and become an authoritative source of knowledge in the team.
Research threats and vulnerabilities in cloud provider infrastructure and containerized applications and workloads.
Develop advanced cloud security models: Create sophisticated models and frameworks for identifying and mitigating new types of cloud threats. Focus on predictive analytics and proactive threat hunting methodologies.
Collaborate with cross functional teams: Work closely with various teams, including engineering, product management, detection engineering, and threat intelligence to drive cloud detections in the CrowdStrike falcon platform.
Provide cloud security thought leadership: Share insights and best practices with the broader security community through publications, conference presentations, and technical blogs.
Requirements
Proven expertise in security research, methodologies, technologies, and tools.
Minimum of 7 years in security research, preferably Cloud infrastructure and Linux.
Experience with cloud-native services, infrastructure, and environments.
Experience with threat research and misconfiguration identification.
Comprehensive knowledge of cloud platforms (AWS, Azure, GCP) and their security features.
Python, golang, and shell scripting experience.
Experience with large scale data analysis.
Comprehensive knowledge of Kubernetes, docker, podman, and similar containerization and orchestration technologies.
Familiarity with cloud automation and orchestration tools for optimizing security processes.
Experience in publishing security research papers and conference talks.
Experience in malware analysis and reverse engineering - experience with Linux malware and ELF reverse engineering is a plus.
Excellent conceptual thinking and communication skills, capable of conveying complex ideas effectively.
Technical knowledge of network, operating systems (mainly Linux) and data platform security.
Good problem solving, communication, and teamwork skills.
Benefits
Market leader in compensation and equity awards
Comprehensive physical and mental wellness programs
Competitive vacation and holidays for recharge
Paid parental and adoption leaves
Professional development opportunities for all employees regardless of level or role
Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
Microsoft Security Specialist role at Syntax focused on delivering Microsoft security workshops and advisory engagements. Collaborating on technology implementation while ensuring customer security success.
Cybersecurity Specialist developing IT resilience and disaster recovery concepts for a global scale in secure IT services. Collaborating across borders in shaping organizational security standards.
Senior Cybersecurity Scrum Master focusing on release management at AT&T, collaborating across teams and managing production change requests with an Agile mindset.
BISO responsible for planning and executing enterprise - wide information security initiatives at Elsevier. Driving cybersecurity awareness and managing technical risk assessments for organizational improvements.
Develop innovative Cloud architectures on Microsoft Azure platforms. Secure cloud infrastructure and applications against various threats while working in a project team.
Analista Pleno de Segurança Patrimonial na Hershey Brasil, responsável por suporte de segurança física e gestão de serviços de segurança. Atuará em conformidade e gestão de crise em São Roque.
Regional Information Security Officer managing security protocols and compliance for KARL STORZ. Leading local ISOs and enhancing information security measures across subsidiaries.
CISO managing information security and privacy governance at Puzzel, a leading cloud - based contact center provider in Europe. Engaging with stakeholders for compliance and risk management.
Manager of IT Support & Endpoint Security overseeing service desk operations and endpoint security strategies. Leading a team to deliver high - quality technical support and manage IT security policies.