CrowdStrike
Sr. Backend Engineer, Cloud - Threat Detection / Incident Response (Hybrid, London)
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Senior Software Engineer, Cloud
As a global leader in cybersecurity, CrowdStrike protects the people, processes, and technologies that drive modern organizations. Since 2011, our mission remains unchanged: to stop breaches with the world’s most advanced AI-native platform.
We rely on global scale distributed systems—processing nearly 3 trillion events per day. Our customers span all industries, and depend on CrowdStrike to safeguard their businesses, communities, and daily operations. Our culture exemplifies mission-driven leadership, hands-on ownership of careers, and an ethos of relentless innovation shared among all employees. Each CrowdStriker combines passion, innovation, and fanatical dedication to our customers, our organization, and one another.
Do you share our vision? The future of cybersecurity starts with you.
About The Role
The Threat Detection and Incident Response ([TCIR])** team is redefining enterprise security with the Falcon Next-Gen SIEM platform, enabling customers to detect, investigate, and remedy threats 150x faster at petabyte scale.
The following positions will extend our team with critical backend engineering:*
Seeking a Senior Software Engineer (Cloud) to build and scale our case management and investigation engine, the collaborative interface for streamlining threat detection and incident response. You will architect, design, and develop the world-class investigation pipelines driving the frontline analysts’ platform, using Go while enabling advanced capabilities (AI/ML, LLM integration, agencyic workflows). This system shall surface alerts, consolidate detections into collaborative casework, and empower cross-team threat hunts that transform our analysts into a true threat defense unit.
If your technical ambition thrives on distributed systems at unprecedented scale and your craft thrives on Go (but other strong backends welcome), we’d love for you to join us.
Core Responsibilities
- Architect and Deploy high-impact systems that scale with analytic rigor, reducing breach impact while maintaining trapping efficiency
- Deliver distributed services and cloud-native architecture that scale to trillions of events, maintaining elite performance and reliability through triage policies and infrastructure
- Design and manage workflows to correlate detections, evidence, and response actions into unified case management that leverages contextual enrichment and AI/ML tools (i.e., persistent entity graphs, auto-generated suggestions, the automated drafting of incident snapshots)
- Ensure scalable BI/ML blending across historical/detection data, enabling insight generation at next-generation scale
- Sets standards in collaborative design and risk management through RFCs, team mentorship, and code review best practices
- Mentor junior colleagues through pairing, mentorship, and knowledge-building, creating a culture focused on *safety, inclusivity, and velocity
- Autonomy: You’ll own initiatives, collaborate within cross-functional leaders, and advocate our trust edge philosophy—noted for computation at the perimeter with unparalleled velocity
- Alert on-call presence to counsel teams through incident resolution, understand key metrics to drive continuous improvements in reliability and efficiency
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Technical Leadership Indicators
You’ll need to own and act at scale—assume ownership for initiatives with:
- Deep expertise in distributed systems design with fluency in high-performance cloud-native architectures (AI/ML, microservices-contrib features).
- Code Leadership Proficiency: From bus factor considerations to optimized observability, manage for engineering excellence and everyday reliability.
- Automatized event flow pipelines with deterministic dependencies and scalable lateral awareness.
Requirements
- Strong team player aligned with the ethos: “One team, One fight.”
- 8+ years of highly industrial software engineering experience, with 5+ years building/modifying cloud-native services, notably in distributed settings (message queues, auto-scaling, etc.)
- Deep understanding of distributed systems principles, load balancing, low-latency computations, and API gating strategies; advanced proficiency in concurrency/actor models and quantum-resilient cryptography concepts (a plus).
- Maximized proficiency in scalable, low-latency services, preferably in Go but accepting other viewshed-harnessing languages (Python, Java, C#, C++).
- Practical knowledge of:
- Docker and Kubernetes for modular processes
- Cloud platforms like AWS/GCP (identity, security, resource orchestration)
- Observability culture (metric/data aggregation tools/alert thresholds)
- Pattern identification based on log/behavioral filters across log silos
- Adept at translating complex/binary business specs into innovative technical solutions on tight deadlines using agile methodology
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- AI/ML Application Enthusiasm: Prior successful application of AI (licensed SME-factored insights):
- LLM integration and workflow automations
- Prompt engineering (CQL, RAG, retrospective/rapid judgment)
- Agentic reasoning frameworks (with detection response observables)
Bonus Experience Values (The “Nice-to-Have Checks”)
- Go/Cloud-related Actions expertise
- Cybersecurity logging/SIEM/SOA strategy and fragment execution
- LLM prompt-engineering toolkits
- Security team [case management] workflows mapping (each step with stakeholders)
Benefits
- Industry-leading compensation & equity. On par with market benchmarks, and with substantial long-term rewards tied to shared success.
- Uncompromising self-write programs via curated professional growth tracking (for each level/complexity horizon, individually tailored, regardless of required branches).
- Holistic Wellbeing assistances.
- Paid parental/ adoption schemes conforming to global child rights.
- Par level or competitive vacation policies in recognition of timeless intention.
- Global Employee Networks & Volunteer initiatives to form our diverse geographical clusters that innovate together.
- Office dominance showcasing workplace amities (claimed places per varied health and environment predilections).
- Corporate status: Great Place to WorkCertified™ globally.
About Us: Ownership & Equality Standards
Belonging and Diversity
We strive for an inclusive culture where every employee brings distinctiveness, engineers like we champion equality. CrowdStrike’s dedication to accessibility and equity is core to our veteran mentorship, accommodation scaffolding, and hands-on meritocracy protocols.
Legal Provisions
CrowdStrike stands firm in its anti-discrimination inclusiveness, as dictated by U.S./EU legislative standards— upholding equal employment application and advancement across axis demographics ranging from veteran’s, emotional disabilities through diet restrictions.
Does our ANYTHING we do.
Call to Action: For our veter-led frontlines: please write on our recruiting@crowdstrike.com channel to key in your access needs.
You were meant here. Look at me. — let's get to work.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location