Detection Engineer - Machine Learning (Remote, East/Central)

About the role

The opportunity: Our CrowdStrike Data Science Machine Learning Operations and Response Team is looking for a Threat Analyst who is both customer- and team-focused. This role will include both response and proactive aspects. This role will be perfect for anyone who has experience involving detections and/or reverse engineering.

What You'll Do

• Analyze detection data including customer reports to determine which aspects of the machine learning models can be improved
• Perform tasks to enable better management of false positive detections
• Analyze binary files to determine their legitimacy
• Review current product detections to ensure they are performing to the company standard
• Address internal questions and concerns regarding customer threat detections

Required

• Exposure and understanding of different types and functionality of malware
• Experience with reverse engineering malware, or malware operations
• Knowledge of programming and scripting languages, in particular Python
• Fundamental understanding of attributes of binary files such as imports/exports and packers
• Ability to demonstrate practical knowledge of research/collection skills and analytical methods
• General understanding of threat/risk management and threat/risk assessment
• Familiarity with various operating systems
• Ability to break down complex problems into workable components
• Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes

Preferred

• Experience in a security operations center or similar environment responding to incidents
• A thorough understanding of Windows OS internals and the Windows API
• Familiarity with MacOS and/or Linux
• Experience with tools used in targeted and criminal cyber-intrusions
• A background in exploit and vulnerability analysis
• Knowledge of a variety of programming languages including C, C++, Java, and assembly
• Experience with threat detections by machine learning