About the Role:
The OverWatch Research and Development team, known as the Strategic Counter-Adversary Research (SCAR) team, conducts applied research, unbounded by specific technologies, to enhance our ability to expose and counter adversaries' activities through the development of novel detection technologies and tooling to optimize analyst workflows. The team consists of Engineers, Researchers, and Subject Area Experts who work together to conceive, design, prototype, and implement novel tooling. The position for the internship is as a Research Intern, taking part in innovation research and prototype development.
The SCAR internship is a hybrid remote role based out of CrowdStrike’s Austin office. The intern is expected to work from the CrowdStrike office two times a week and should be within travel distance from the Austin office.
What You’ll Do:
- Research and develop technology in support of cybersecurity threat hunting
- Support a key machine learning project focused on enhancing threat hunting capabilities
- Contribute to various ongoing R&D team projects as required
- Shadow different members of the team to gain exposure to threat hunting methodologies
What You'll Need:
- Must be currently working towards a Master’s degree. Graduating between May 2027-December 2027
- Demonstrate passion for cybersecurity through one or more of the following:
- Cybersecurity-related major (Computer Science, Information Technology, Information Systems, International Affairs, Government, Informatics, etc)
- Relevant coursework (Machine Learning, Data Science, Security Analytics, Programming, Computer Systems, Operating Systems, Networking)
- Extracurricular activities (e.g., capture-the-flag competitions, cybersecurity clubs)
- Required: Programming experience
- Preferred: Coursework or personal projects
- Key languages: Python, Go, Java
- Also considered: Data analysis languages (e.g., R) on a case-by-case basis
- Required: Ability to quickly learn technical concepts in fields like operating systems, networking, and cloud technologies.
- Required: Strong work ethic and ability to work on teams and independently.
- Preferred: Data analysis or machine learning experience.
- Be self-motivated and actively seek opportunities for growth
- Desire to rapidly accelerate their skills
- Crave new and innovative work
- Be able to complete technical tasks with minimal supervision
- Desire to develop both technical and soft skills
- Contribute to a positive work environment, and have a can-do attitude
- Be seeking a career in cybersecurity and/or security engineering
- Bring a willingness to build, improve and innovate solutions to interesting technical problems
Bonus Points:
Successful candidates will have experience in one or more of the following areas:
- Understanding of machine learning concepts and applications in security
- Experience with security analytics platforms or SIEM technologies
- Familiarity with common attack frameworks (MITRE ATT&CK, etc.)
- Knowledge of cloud security concepts
- Experience with automation frameworks and orchestration tools
- Have an investigative mindset and a desire to find and stop evil
- Keep up with the latest vulnerabilities and breaches
From a technical perspective, it is desired (but not required) that candidates:
- Be comfortable with command-line interfaces (Windows, Linux, macOS, or any combination of those)
- Have experience with data analysis and visualization tools
- Have experience developing either front-end or back-end software
- Be acquainted with strategies and tools to rapidly analyse large sets of logs (such as Splunk, ELK, etc.)
