Sr. Security Research II, DataOps (Remote)
About The Position
CrowdStrike is looking for a self-starting, responsible, action-oriented, and highly motivated Senior Security Researcher II to join our Counter Adversary Operations team. This position will require the candidate to collect and analyze data from the cybercriminal underground that could impact the security and privacy of CrowdStrike customers and their users. This role sits at the intersection of threat intelligence, software engineering, and AI-augmented operations. You'll maintain collection infrastructure at scale, develop intelligent automation systems, and respond rapidly to customer-impacting incidents. A successful candidate will be an operational security (OPSEC)-savvy, detail-oriented problem solver, and have substantial experience driving concurrent projects and issues to completion with minimal direction. Highly qualified candidates will have an excellent technical foundation, experience in cyber threat intelligence, and a track record of building production-grade automation systems.
Requirements
- Proficient in at least one general-purpose programming language such as Python, and experience with developing tools for data extraction, web scraping, and interacting with databases.
- Experience building AI-powered automations, custom skills, plugins, or agent harnesses that integrate LLM capabilities with production infrastructure.
- Demonstrated ability to design deterministic workflows for complex operational tasks including data collection orchestration, failure detection, and automated remediation.
- Proven ability to design, implement, and interact with RESTful and other types of APIs for both data retrieval and system integration.
- Experience building, deploying, and maintaining tools and services in Docker for internal and external users.
- Familiarity with version control (Git), CI/CD pipelines, and collaborative software development practices.
- Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.
- Experience designing and leading data-driven investigations, and visualizing results, to communicate actionable findings.
- Confidence in navigating large datasets of unique, unstructured data and preparing it for analysis, and using statistical methods to find needles in the haystack.
- Familiarity with the online threat landscape ranging from social media, to underground forums to ransomware/DLS ecosystems.
- Practical knowledge of research collection tradecraft, including operational security (OPSEC) principles and best practices.
- Appreciation for CrowdStrike's mission and principled in the concepts of security, trust and safety, and privacy.
- Ability to work remotely, in a collaborative team environment across different time zones.
- Customer service orientation with experience managing stakeholder expectations during high-pressure incidents.
- Undergraduate degree, or equivalent experience, in information security, cybersecurity, computer science, data science, intelligence studies or a related field.
Nice To Haves
- Additional language expertise (Russian, Mandarin, Korean, Spanish, Farsi, Arabic, Japanese, French, Hindi, Urdu or others).
- Prior intelligence community or cyber threat intelligence background.
- Demonstrated engagement in the security community, academic research community, or open source software development.
- Other technical security certifications or research background is a plus.
Responsibilities
- Complete technical collections projects including acquisition, monitoring, and analysis of deep and dark web data
- Design and implement AI-powered automation systems including custom Claude Code skills, MCP servers, agent workflows, and harnesses that integrate LLM capabilities with collection infrastructure
- Maintain collection reliability across high-volume internet sources, responding rapidly to site structure changes, authentication failures, and anti-bot protections
- Respond to customer-impacting collection gaps and data quality issues with rapid diagnosis and resolution
- Build, deploy, and maintain collection services, worker processes, data pipelines, and APIs in Docker and cloud environments
- Conduct proactive research into underground cybercriminal economies and how threat actors are exploiting or abusing emerging technologies
- Employ secure operational tradecraft methods and practices
- Collaborate closely with multiple and stakeholders across CrowdStrike's global Counter Adversary Operations team
Benefits
- Market leader in compensation and equity awards
- Comprehensive physical and mental wellness programs
- Competitive vacation and holidays for recharge
- Paid parental and adoption leaves
- Professional development opportunities for all employees regardless of level or role
- Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
- Vibrant office culture with world class amenities
- Great Place to Work Certified™ across the globe
- health insurance
- 401k
- paid time off
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
