Threat Researcher II (Remote – IRE, UK or ROU)

Overview

In this role you will study emerging malware and threat landscapes to strengthen Falcon’s detection capabilities. You’ll collaborate with Threat Research, Engineering, Data Science, and Red Team to translate findings into product improvements. You will assess threats across the attack lifecycle and validate defenses through automation and analytics. This position offers impact across customers and the Falcon platform within CrowdStrike’s AI-first Malware Research Center. Your work helps advance proactive protection at scale in a mission-driven environment.

Pay / Benefits

• Market leader in compensation and equity awards
• Comprehensive physical and mental wellness programs
• Competitive vacation and holidays
• Paid parental and adoption leaves
• Professional development opportunities
• Employee networks and volunteer opportunities

Responsibilities

• Research and analyze emerging malware and threats and their impact on customers
• Investigate the full attack lifecycle to ensure detection at every stage
• Differentiate real threats from noise using data from multiple sources
• Identify detection gaps and partner with engineering to close them
• Support external security testing programs and address missed detections
• Respond to newly discovered threats with technical investigations and detection guidance
• Collaborate with Threat Research, Engineering, Red Team, and ML teams to translate research into product improvements
• Design and improve automation to speed up threat analysis
• Communicate findings clearly to engineering and response teams
• Contribute to Falcon’s evolution by integrating malware research, automation, AI, and ML

Key requirements

• Bachelor’s or Master’s degree in Computer Science or related field
• 4+ years in threat research with a focus on malware analysis
• Experience reverse engineering file-based malware, exploits, and related techniques
• Strong disassembly and programming fundamentals
• Deep knowledge of at least one major OS and internals for behavior-based analysis
• Understanding of the adversary kill chain and red team methodologies
• Experience translating research into production capabilities
• Ability to develop small automation or scripting projects
• Experience with public security testing programs (AV-Test, AV-Comparatives, SE Labs) is a plus
• Experience with large datasets and tools like Splunk, Elasticsearch, or Kibana is a plus
• Proven use of AI technologies to improve decision-making and workflows is a plus

• collaboration
• clear technical communication
• problem solving
• malware analysis
• reverse engineering
• kill chain / adversary behavior

…