Engineer II, Software Assurance, Product Security

CrowdStrike is hiring an Engineer II on its Product Security team to protect its products and customers from software supply-chain threats. The role assesses open-source risks, secures GitHub organizations and repositories, and develops controls and automation to harden code-hosting environments. Responsibilities Assess risk and provide security guidance to engineers across the company on open-source software usage and repository configurationsImplement and maintain controls and processes to secure public and private GitHub organizations, including repository guardrails and secret scanningHarden open-source code usage, development, ingestion, and distribution across the enterpriseInvestigate open-source dependencies and third-party packages to mitigate supply chain risks (e.g., typosquatting, dependency confusion)Advocate for secure coding and open-source compliance practices to the wider engineering organizationContribute to the delivery of security initiatives aimed at hardening Crow