Backend Engineer III, Falcon NG-SIEM, Global Serverless Platform (Hybrid)

Engineer III NG-SIEM Global Serverless Platform Team

CrowdStrike is seeking an experienced Engineer III for the NG-SIEM (next generation security information and event management) Global Serverless Platform team in the US. The Global Serverless Platform team is responsible for building and operating the global- and region-level automation that will automatically manage the industry's largest event data store and search system.

Our goals are to scale to 100s of PB of data ingress per day, while maintaining best-in-class ingest, search, and detection SLAs, as well as a best-in-class cost structure.

The team that you will be a part of owns the regional control plane layer, as well as account provisioning systems and region-level integrations with the rest of the Falcon platform.

You will be joining a distributed team of highly collaborative engineers who share a strong passion for the product. In this role you will get a chance to work on hard engineering problems that do not have well-defined solutions. You will become one of the go-to experts of the NG SIEM control plane, and will have a broad understanding of the entire NG SIEM data plane fleet.

The team's vision is to build a zero-touch, highly refined, self-service model of a data plane.

Teams in NG SIEM have a great amount of autonomy, and own a part of the NG SIEM experience, from ideation and development to deployment and feedback. This includes ensuring high quality of the features they deliver, by writing automated tests, and performing manual tests. Moreover, we do not just throw over features to our operations teams, but we constantly observe and monitor new features in production.

An important part of our work is making sure that our platform continues to be the most effective and reliable in terms of efficiency, while also ensuring the stability of the platform. Some of the critical elements that the team is working on improving is our hardware and fleet utilization across 400k CPU cores. The team is also working with our internal asset storages and enabling other teams in managing the NG SIEM dataplane. You will be playing a crucial role in ensuring that the NG SIEM dataplane can continue with its successful durability and high availability.

This role is hybrid, on-site in Austin, TX. Candidate will be expected to be in office, 2-3x a week.

What You'll Do:

• Work in a team of friendly, trustworthy and knowledgeable colleagues
• Work on cross-team platform-level initiatives and projects
• Participate in scoping, designing and developing of new features and lead delivery of solutions to open-ended problems
• Contribute to moving the scalability of our LogScale engine to the next level
• Develop the control plane in Golang and extending the control plane capabilities to keep the scale with increasing scale of the platform while ensuring high availability
• Communicate technical decisions through design documents, technical talks and improving our internal documentation.
• Provide technical advice on decisions, and research and propose new technologies
• Collaborate within the team on delivery of new solutions and support team members through code reviews, pairing, documentation, design reviews and technical guidance
• Monitor and followup on features released in our production environments
• Troubleshoot critical production issues

What You'll Need:

• Must be a U.S. Citizen or US Permanent Resident.
• A passion for or personal interest in distributed systems and curiosity of how our running systems are doing
• Experience in software development in general and the ability to juggle making pragmatic tradeoffs between short-time delivery needs vs long-term product goals
• Experience in contributing to broad technical leadership in products or services
• Fluency in both functional and object oriented programming and the ability to pick up new languages on the go
• A can-do attitude, and that you thrive collaborating in a team and are not afraid of taking on responsibilities

Bonus Points:

• Experience programming in Golang
• Experience with commercial clouds (AWS, Azure, GCP)
• Experience with Kafka
• Hands on experience in large-scale (distributed) system architecture, high scalability and availability, and optimization
• Exposure to or experience with Log Management or cybersecurity products