Engineer II - SDET, NG-SIEM (Hybrid)
At its midpoint, $125k/yr, this role pays less than the $210k/yr midpoint for Security Engineering openings today (usual band $174k–$390k/yr).
The full posting
As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed - we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.
About the Role
Our mission is to make all of our customers' security-relevant data continuously available for automated detection and response, threat hunting, and other Falcon platform use cases. The systems behind NG-SIEM (next-generation security information and event management) are growing to accommodate >100 PB of event data ingested every day, up to 10 years of retention, and dozens of millions of queries per hour for tens of thousands of customers. At the core of NG-SIEM is LogScale, our distributed log storage and search engine, which runs on large multi-node clusters built on Kafka, object storage and Kubernetes.
As an Engineer II – SDET (Software Development Engineer in Test) on the NG-SIEM Test & Release team, you will help prove that every LogScale release is safe before it reaches customers. We ship LogScale through a staged rollout, where each release moves through progressively larger groups of clusters. You will work alongside a senior SDET who is building an automated release validation platform: end-to-end tests that run on real clusters and check that search results are correct, that no data is lost, that performance holds under load, and that the system recovers when the services it depends on fail. Your job is to turn that plan into working, reliable tests and tooling, one well-defined piece at a time, and to grow your scope as you learn the system.
This is a hands-on coding role. Most of your time will go into writing and maintaining test code in Go, running it against real clusters, and figuring out why something failed. You will be part of a small team that works closely with LogScale engineers, release managers and deployment teams across the US and Europe.
This is a hybrid opportunity, with the expectation to be able to be in our Austin, TX office 2-3x a week.
What You'll Do
- End-to-end test automation: Write and maintain automated end-to-end and integration tests in Go for LogScale and NG-SIEM services using our in-house test framework, covering data ingest, search, and federated search across external data sources.
- Release validation: Add test suites to the release pipeline that run against real LogScale clusters at each stage of the rollout, and help turn their results into a clear pass or fail signal for every release candidate.
- Data correctness: Build tests that confirm every event we ingest can be found by search with the correct results, and that one customer's data never shows up for another.
- Load and resiliency testing: Run and extend load tests and failure scenarios, such as restarting nodes or slowing down Kafka or storage, and record how the system behaves and how quickly it recovers.
- Test reliability: Investigate failing and flaky tests, find the root cause in the test or in the product, and either fix it or file a clear bug with the evidence attached.
- Regression coverage: Work with LogScale engineers to reproduce bugs found in production and turn them into automated tests, so the same problem cannot ship twice.
- Tooling and continuous improvement: Improve our test tooling, CI pipelines and documentation, and use AI-assisted development to write, review and maintain tests faster.
What You'll Need
- Must be a U.S. Citizen or US Permanent Resident.
- A Bachelor's degree in Computer Science, Computer Engineering or a related field, or equivalent practical experience;
- 2+ years of professional experience in software development or test automation, with most of that time spent writing code rather than running manual tests;
- Solid programming skills in at least one language such as Go, Python or Java, and a willingness to work primarily in Go;
- Experience testing backend services or APIs (for example REST or GraphQL), not only user interfaces;
- A good grasp of testing fundamentals: unit, integration, end-to-end and performance testing, and when each one is the right tool;
- Experience with CI/CD pipelines (for example Jenkins or GitLab CI) and with Git;
- Comfort working on Linux and with containers (Docker), and basic familiarity with Kubernetes;
- Curiosity about how distributed systems behave and fail, and the habit of digging into logs and metrics to understand why a test failed;
- Clear written communication: you state your assumptions and ask questions up front, and you write bug reports that others can act on;
- A can-do attitude, and that you thrive collaborating in a team and are not afraid of taking on responsibilities;
- Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.
Bonus Points
- Experience with Go testing tools and patterns (for example table-driven tests, testify or Ginkgo);
- Exposure to Kafka, object storage such as Amazon S3, or other distributed data systems;
- Experience with load testing tools such as k6, Gatling or JMeter;
- Exposure to fault injection or chaos testing (for example Chaos Mesh, LitmusChaos or Toxiproxy);
- Experience with log management, SIEM or observability products, or with query languages for searching logs;
- Experience with a commercial cloud (AWS, Azure or GCP);
- Exposure to or experience with cybersecurity products.
#LI-SS1
This role will require the candidate to periodically undergo and pass additional background and fingerprint check(s) consistent with government customer requirements.
Benefits of Working at CrowdStrike
- Market leader in compensation and equity awards
- Comprehensive physical and mental wellness programs
- Competitive vacation and holidays for recharge
- Paid parental and adoption leaves
- Professional development opportunities for all employees regardless of level or role
- Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
- Vibrant office culture with world class amenities
- Great Place to Work Certified™ across the globe
CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.
CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements.
If you need assistance accessing or reviewing this website, submitting an application, requesting an accommodation, or providing feedback on the job posting, please contact us at recruiting@crowdstrike.com .
Find out more about your rights as an applicant.
CrowdStrike participates in the E-Verify program.
Notice of E-Verify Participation
Right to Work
CrowdStrike, Inc. is committed to fair and equitable compensation practices. Placement within the pay range is dependent on a variety of factors including, but not limited to, relevant work experience, skills, certifications, job level, supervisory status, and location. The base salary range for this position for all U.S. candidates is $100,000 - $150,000 per year, with eligibility for bonuses, equity grants and a comprehensive benefits package that includes health insurance, 401k and paid time off.
For detailed information about the U.S. benefits package, please click here .
Text as CrowdStrike published it; last compared with the original on 12 Nov 2026.
The employer: CrowdStrike
Sells the Falcon platform for endpoint, cloud, identity and SIEM; its services teams respond to breaches while engineers build sensors and NG-SIEM.
Pay and benefits: Remote and hybrid roles with RSUs in CrowdStrike (Nasdaq: CRWD), plus a summer 2027 red team internship.
Let security teams come to you
Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.
Hear first when CrowdStrike posts a security role
We read CrowdStrike's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.