Senior Product Security Engineer, Application Security (Remote)

CrowdStrike Holdings, Inc. • $160K — $250K *

US-AnywhereRemote in United States

Information Technology

8 - 10 years of experience

Today

Be an Early Applicant

By clicking Apply, I agree with Ladders' Terms of Use and Privacy Policy

Job Overview by Ladders

Qualifications

10+ years of experience in CyberSecurity, focusing on identifying security defects and collaborating with engineering teams.
In-depth understanding of Agile/DevOps environments for software creation and delivery.
Proficient in using threat model frameworks, particularly STRIDE.
Expertise in manual secure code reviews for applications developed in Go, Python, or JavaScript.
Deep expertise in browser security across platforms and experience with TypeScript, React, Node.js, and Electron.
Hands-on experience reviewing and testing API endpoint security.
Knowledgeable in secure configurations for cloud-native and containerized applications across multiple cloud environments.

Responsibilities

Join engineering teams as a security expert to influence application design and capabilities.
Create and enhance threat models to guide security architecture reviews.
Conduct source code reviews to identify security defects and risks.
Attack applications throughout the Secure Development LifeCycle to find vulnerabilities.
Collaborate with developers to clarify defects and implement effective security solutions.
Develop integrated tools and automation to streamline security processes for the engineering team.
Lead response efforts for the bug bounty program and identify similar issues across platforms.

Benefits

Market leader in compensation and equity awards.
Comprehensive wellness programs for physical and mental health.
Competitive vacation and holiday policies for adequate recharge.
Paid parental and adoption leave for new parents.
Opportunities for professional development at all levels.
Employee Networks and volunteer opportunities to foster community connections.
Vibrant office culture with exceptional amenities.
Great Place to Work Certified™ globally.

Full Job Description

About the Role:

Help us protect CrowdStrike and its customers from the most advanced threats by securing our applications. CrowdStrike's Product Security team breaks the mold of traditional internal security, and focuses on active threats to CrowdStrike's products. As a Senior Application Security Engineer you will dig deep into web applications, find design and implementation flaws, help our product engineers fix defects, and play a role in shipping secure code. You'll be actively involved in fixing defects rather than just reporting them and hoping for the best. Additionally, you will be integral to cross-cutting projects to further harden internal systems and processes against active and emerging threats.

What You'll Do:

Join engineering teams working on applications as a security expert and advisor, influencing the design and capabilities of our products
Create, maintain, and mature threat models to drive security architecture review and eliminate threat surface area
Review application source code, looking for security defects and risk
Attack applications throughout the Secure Development LifeCycle
Work with developers to help them understand defects, risks, design weaknesses, etc. and implement proven solutions
Build integrated tools and automation to make life easier for you, your team, and our engineering partners
Drive response efforts to our bug bounty program, hunt for similar issues across the platform, and improve the security of our applications

What You'll Need:

10+ years of experience in CyberSecurity, with expertise in identifing security defects and engage with engineering teams to find solutions
A deep understanding of how software products are created and shipped in Agile/DevOps like environments
Experience with threat model framework(s), especially using STRIDE
Proven experience in manual secure code review for apps built with Go (Golang), Python, or JavaScript
Deep expertise in browser security implementations across platforms (Chrome, Firefox, etc. for desktop and mobile) with strong experience across the following: TypeScript, React, Node.js, Electron
Demonstrable proficiency in hands-on review and testing of API endpoint security
A working knowledge of secure configuration of cloud-native and containerized apps in multiple Cloud environments (GCP, Azure, AWS)
Experience using and/or maintaining commercially available AppSec tools like SAST, DAST, CSPM, DSPM, and ASPM suites
A solid understanding of common software weaknesses that impact cloud and web applications (not just the OWASP Top 10) and demonstrable experience in application penetration testing
Examples of collaborating across technical teams: asking technical questions, challenging assumptions, getting or providing context for decisions, etc.
Demonstrable experience developing/maintaining automation for application security tasks and defect identification.
Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.

Bonus Points:

Experience working at extremely large scale
Comfortable with ambiguity and capable of determining direction
Example(s) of having a positive working relationship with product engineers (software product development experience is a huge bonus)
Deep knowledge of Docker and Kubernetes (k8s)
Experience with WebAssembly (WASM), Kotlin, or Scala
Engaged in providing security enhancements to open source projects
Experience in mentoring, coaching, and/or improving team culture

Education/Certifications:

Technical security certifications or academic background are a plus.

#LI-Remote
#LI-CS1

Benefits of Working at CrowdStrike:

Market leader in compensation and equity awards
Comprehensive physical and mental wellness programs
Competitive vacation and holidays for recharge
Paid parental and adoption leaves
Professional development opportunities for all employees regardless of level or role
Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
Vibrant office culture with world class amenities
Great Place to Work Certified™ across the globe

The base salary range for this position for all U.S. candidates is $160,000 - $250,000 per year, with eligibility for bonuses, equity grants and a comprehensive benefits package that includes health insurance, 401k and paid time off.

For detailed information about the U.S. benefits package, please click here.

Expected Close Date of Job Posting is:09-29-2026

About CrowdStrike Holdings, Inc.

CrowdStrike Holdings, Inc. Careers

Joining CrowdStrike Holdings, Inc. presents an unparalleled opportunity to advance a career in the tech industry with a company at the forefront of digital security. As a leader in cybersecurity solutions, CrowdStrike Holdings, Inc. offers a range of job opportunities that cater to a variety of skills and experiences, from entry-level positions to senior leadership roles.

Explore Job Opportunities

CrowdStrike Holdings, Inc. is continuously seeking talented individuals who are passionate about protecting organizations against cyber threats. With a commitment to innovation and excellence, the company is hiring professionals who are eager to contribute to a team that values hard work and creative solutions.

Innovation and Professional Growth

At CrowdStrike Holdings, Inc., employees are encouraged to push the boundaries of technology and leadership. The company supports professional growth through robust training programs, including leadership development and diversity training, ensuring that every team member has the resources to thrive in their career.

Culture and Benefits

The culture at CrowdStrike Holdings, Inc. is dynamic and inclusive, fostering a workplace where diversity is celebrated and every voice is heard. Employees enjoy comprehensive benefits that support both their professional and personal lives, enhancing job satisfaction and team morale.

Internship Programs

For those starting their career, CrowdStrike Holdings, Inc. offers internship programs that provide a rich learning environment. Interns gain hands-on experience, working alongside seasoned professionals and participating in projects that deliver real-world solutions.

Networking and Career Advancement

CrowdStrike Holdings, Inc. emphasizes the importance of networking within the industry, offering numerous opportunities for employees to connect with thought leaders and innovators. These connections can lead to career advancement and a deeper understanding of the cybersecurity landscape.

Applying for a Position

To apply for a position at CrowdStrike Holdings, Inc., candidates should prepare a resume that highlights relevant experience and skills. The interview process is designed to assess not only professional qualifications but also a candidate's fit within the company culture and team.

Stay Connected with CrowdStrike Careers

Interested candidates can stay informed about new openings and company news by subscribing to job alert emails. This personalized service ensures that potential applicants are the first to know about new opportunities that match their career interests and skills.

Join the Team

CrowdStrike Holdings, Inc. is looking for curious, creative, and solution-driven team players. Explore the employment opportunities on the CrowdStrike Holdings, Inc. careers page to find a position that matches your skills and passions.

SEARCH CROWDSTRIKE JOBS

Keep Up to Date

Stay ahead with career tips, insider perspectives, and industry-leading insights you can put to use today—all from the professionals who work at CrowdStrike Holdings, Inc.

READ CAREERS BLOG

Job Alert Emails

Customize your subscription to receive job alerts, latest news, and insider tips tailored to your preferences. Discover the exciting and rewarding career opportunities waiting at CrowdStrike Holdings, Inc.

Learn more about CrowdStrike Holdings, Inc.

Industry