About the Role:CrowdStrike is looking for a self-starting, responsible, action-oriented, and highly motivated Senior Security Researcher II to join our Counter Adversary Operations team. This position will require the candidate to collect and analyze data from the cybercriminal underground that could impact the security and privacy of CrowdStrike customers and their users.
This role sits at the intersection of threat intelligence, software engineering, and AI-augmented operations. You'll maintain collection infrastructure at scale, develop intelligent automation systems, and respond rapidly to customer-impacting incidents.
A successful candidate will be an operational security (OPSEC)-savvy, detail-oriented problem solver, and have substantial experience driving concurrent projects and issues to completion with minimal direction.
Highly qualified candidates will have an excellent technical foundation, experience in cyber threat intelligence, and a track record of building production-grade automation systems.
What You'll Do:- Complete technical collections projects including acquisition, monitoring, and analysis of deep and dark web data
- Design and implement AI-powered automation systems including custom Claude Code skills, MCP servers, agent workflows, and harnesses that integrate LLM capabilities with collection infrastructure
- Maintain collection reliability across high-volume internet sources, responding rapidly to site structure changes, authentication failures, and anti-bot protections
- Respond to customer-impacting collection gaps and data quality issues with rapid diagnosis and resolution
- Build, deploy, and maintain collection services, worker processes, data pipelines, and APIs in Docker and cloud environments
- Conduct proactive research into underground cybercriminal economies and how threat actors are exploiting or abusing emerging technologies
- Employ secure operational tradecraft methods and practices
- Collaborate closely with multiple and stakeholders across CrowdStrike's global Counter Adversary Operations team
What You'll Need:Software Development & Automation:- Proficient in at least one general-purpose programming language such as Python, and experience with developing tools for data extraction, web scraping, and interacting with databases.
- Experience building AI-powered automations, custom skills, plugins, or agent harnesses that integrate LLM capabilities with production infrastructure.
- Demonstrated ability to design deterministic workflows for complex operational tasks including data collection orchestration, failure detection, and automated remediation.
- Proven ability to design, implement, and interact with RESTful and other types of APIs for both data retrieval and system integration.
- Experience building, deploying, and maintaining tools and services in Docker for internal and external users.
- Familiarity with version control (Git), CI/CD pipelines, and collaborative software development practices.
- Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.
Data Analysis:- Experience designing and leading data-driven investigations, and visualizing results, to communicate actionable findings.
- Confidence in navigating large datasets of unique, unstructured data and preparing it for analysis, and using statistical methods to find needles in the haystack.
Domain Knowledge:- Familiarity with the online threat landscape ranging from social media, to underground forums to ransomware/DLS ecosystems.
- Practical knowledge of research collection tradecraft, including operational security (OPSEC) principles and best practices.
- Appreciation for CrowdStrike's mission and principled in the concepts of security, trust and safety, and privacy.
Collaboration & Communication:- Ability to work remotely, in a collaborative team environment across different time zones.
- Customer service orientation with experience managing stakeholder expectations during high-pressure incidents.
Bonus Points:- Additional language expertise (Russian, Mandarin, Korean, Spanish, Farsi, Arabic, Japanese, French, Hindi, Urdu or others).
- Prior intelligence community or cyber threat intelligence background.
- Demonstrated engagement in the security community, academic research community, or open source software development.
Education:- Undergraduate degree, or equivalent experience, in information security, cybersecurity, computer science, data science, intelligence studies or a related field.
- Other technical security certifications or research background is a plus.
#LI-Remote
#LI-EV1
Benefits of Working at CrowdStrike:- Market leader in compensation and equity awards
- Comprehensive physical and mental wellness programs
- Competitive vacation and holidays for recharge
- Paid parental and adoption leaves
- Professional development opportunities for all employees regardless of level or role
- Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
- Vibrant office culture with world class amenities
- Great Place to Work Certified™ across the globe
The base salary range for this position for all U.S. candidates is $100,000 - $155,000 per year, with eligibility for bonuses, equity grants and a comprehensive benefits package that includes health insurance, 401k and paid time off.
For detailed information about the U.S. benefits package, please click here.
Expected Close Date of Job Posting is:10-04-2026
