Security Engineer II

Job Summary

Focusing on securing open-source software and upstream dependencies, the full-time remote Security Engineer II will assess risks, implement security controls, and collaborate on projects to protect CrowdStrike's software supply chain and code-hosting environments.

Key responsibilities

• Assess risk and provide security guidance on open-source software usage and repository configurations
• Design, implement, and maintain security tools and processes for GitHub organizations, including repository guardrails and secret scanning
• Investigate open-source dependencies and third-party packages to mitigate supply chain risks

Required qualifications

• Experience in an engineering role implementing and monitoring software security systems
• Strong working experience with GitHub, including repository administration and access management
• Experience identifying and mitigating open-source vulnerability risks
• Proficiency in one or more scripting languages, such as Python, Golang, or Shell
• Domain knowledge of the software development lifecycle and secure coding practices