CrowdStrike · 3 hours ago
Principal Engineer, Cloud Content (Remote)
CrowdStrike is a global leader in cybersecurity that aims to stop breaches with its advanced AI-native platform. They are seeking a Principal Engineer to lead cloud threat detection initiatives, design detection logic, and influence cloud architecture decisions. This role involves building detection pipelines and mentoring other engineers while ensuring high-quality detection capabilities across public clouds.
Artificial Intelligence (AI)Cloud Data ServicesCloud SecurityCyber SecurityNetwork Security
Responsibilities
Architect, build, and optimize cloud detection pipelines: telemetry ingestion, log processing, alerting, detection-as-code workflows, and automated analysis frameworks
Develop advanced detections for cloud-native threats: IAM misconfigurations, lateral movement across cloud services, runtime/container attacks, serverless abuse, data-exfiltration patterns, persistence mechanisms, and cloud control-plane manipulation
Lead cloud threat research: track emergent attacker tradecraft, cloud-native TTPs, abuse of managed services, supply-chain risks, ephemeral compute patterns, and multi-cloud attack surfaces
Conduct advanced investigations involving cloud logs, control-plane events, network telemetry, and container/runtime signals
Collaborate deeply with cloud engineering, platform teams, and DevOps to embed telemetry early in design — instrumentation, log generation, audit events, and detection hooks across cloud services
Recommend and drive enhancements to cloud observability and detection coverage, backed by analysis of gaps, adversary opportunities, and telemetry blind spots
Influence architectural decisions and strategic initiatives through data, technical depth, and adversary-focused perspectives
Mentor other detection engineers by setting standards for detection logic, code quality, cloud telemetry hygiene, and investigation methodology
Qualification
Required
8 to 15+ years of experience in cloud threat detection, cloud security engineering, incident response, threat hunting, or equivalent
Strong expertise with AWS and at least one of Azure or GCP; deep knowledge of cloud control-plane events, service logs, runtime/container ecosystems, and network architectures
Proven ability to design and deliver high-fidelity cloud detections in large-scale environments, with understanding of FP/FN trade-offs and detection-as-code methodologies
Strong engineering ability: Python, Go, or equivalent languages; familiarity with CI/CD, infrastructure-as-code, and cloud automation
Demonstrated ability to lead complex cloud investigations and turn findings into durable detection logic
Strong understanding of cloud threat models: identity-based attacks, misconfiguration abuse, boundary-less lateral movement, data-exfiltration paths, and cloud service exploitation
Ability to influence platform teams, propose architectural improvements, and advocate for telemetry and detection requirements with clear rationale and evidence
Preferred
Experience with multi-cloud detection architectures at scale
Experience building detection testing frameworks or automated validation pipelines
Deep familiarity with attacker tradecraft targeting cloud infrastructure
Strong communication skills; concise, technical, grounded in adversary behavior and detection outcomes
Benefits
Market leader in compensation and equity awards
Comprehensive physical and mental wellness programs
Competitive vacation and holidays for recharge
Paid parental and adoption leaves
Professional development opportunities for all employees regardless of level or role
Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
Vibrant office culture with world class amenities
Great Place to Work Certified™ across the globe
Health insurance
401k
Paid time off
Company
CrowdStrike
CrowdStrike is a cybersecurity technology firm that provides cloud-delivered protection for cloud workloads, identity, and data.
H1B Sponsorship
CrowdStrike has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (116)
2024 (62)
2023 (91)
2022 (60)
2021 (49)
2020 (22)
Funding
Current Stage
Public CompanyTotal Funding
$1.24BKey Investors
ARK Investment ManagementAccelCapitalG
2022-12-01Post Ipo Equity· $4.6M
2021-01-12Post Ipo Debt· $750M
2019-06-12IPO
Recent News
2026-01-01
2025-12-31
2025-12-27
Company data provided by crunchbase