Content Engineer

• Falcon For IT

About Crowd Strike

As a global leader in cybersecurity, Crowd Strike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn't changed — we're here to stop breaches, and we've redefined modern security with the world's most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on Crowd Strike to keep their businesses running, their communities safe and their lives moving forward. We're also a mission-driven company. We cultivate a culture that gives every Crowd Striker both the flexibility and autonomy to own their careers. We're always looking to add talented Crowd Strikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role

Join Crowd Strike's Falcon For IT product team as a Content Engineer, where you'll create and maintain a global library of IT automation scripts, or content, deployed to millions of endpoints. If you're a systems administrator who has automated away repetitive tasks, written scripts that run across thousands of servers, and understands the difference between "works on my laptop" and "works on 10,000 production endpoints" - this role is for you.

You will author native OS scripts (PowerShell, Bash, Zsh), Python automation, OSQuery queries, and visualization dashboards that solve real-world IT operations problems: health monitoring, inventory collection, compliance checking, and system remediation. Your code will run on millions of Windows, Linux, and macOS endpoints globally.

Most sysadmin roles have you managing infrastructure. This role has you creating the automation tools that thousands of other IT teams will use to manage their infrastructure. Your scripts will run on more endpoints than most sysadmins will touch in their entire career. You'll solve problems once, and that solution will be deployed globally.

About the Product

Falcon For IT revolutionizes how IT & Security teams manage their infrastructure by providing AI-powered insights into endpoints, applications, and system behavior. Our cloud-based platform processes real-time telemetry from our lightweight sensor deployed across customer environments, delivering instant answers to complex infrastructure questions and accelerating incident response times.

What You'll Do

• Author production-grade automation scripts for Windows (PowerShell), Linux (Bash), and macOS (Zsh) that execute safely at massive scale
• Build IT operations content including system health checks, inventory collection, performance monitoring, compliance validation, remediation tasks, and other content that solves problems for our customers
• Create visualization dashboards using Crowd Strike's Next-Gen SIEM to display data and metrics from your scripts
• Optimize for performance and safety - your scripts must run efficiently on resource-constrained endpoints without impacting user productivity
• Design cross-platform solutions where possible, or platform-specific implementations where necessary
• Validate content quality through code review, testing, and security analysis before publication
• Collaborate with IT operations teams to understand real-world problems and translate them into automation solutions
• Maintain the content publication pipeline working with engineering teams to enhance content delivery and validation systems
• Source and validate third-party content ensuring it meets Crowd Strike quality and security standards

Technical Stack

Primary Languages: PowerShell, Bash, Zsh, Python

Query Languages: OSQuery, Log Scale/Humio

Platforms: Windows, Linux (Ubuntu/RHEL/CentOS/Debian), macOS

Tools: Git, VSCode, PowerShell ISE, vim/nano, SSH, RDP

Data Visualization: Log Scale/Humio dashboards

CI/CD: GitHub Actions, automated testing pipelines

Cloud: AWS (S3, Lambda, EC2) - exposure helpful but not required

What You'll Need

Core Systems Administration Experience

5+ years in systems administration with heavy automation/scripting focus in at least one of:

Windows Administration

• Advanced-level PowerShell scripting (5.1+ compatibility required)
• Deep understanding of Windows internals: registry, services, event logs, WMI/CIM, scheduled tasks
• Experience with Active Directory, Group Policy, Windows Update mechanisms
• Performance optimization: .NET calls vs cmdlets, efficient loops, avoiding pipeline overhead
• Written scripts managing thousands+ Windows servers/endpoints

Linux Administration

• Advanced-level Bash scripting with focus on portability (RHEL/CentOS, Ubuntu, Debian, Amazon Linux, SUSE)
• Deep understanding of Linux fundamentals: systemd, package managers (yum/dnf/apt), process management, file permissions
• Experience with configuration management, log analysis, system monitoring
• Safe scripting practices: proper error handling, quoting, lock file management
• Written scripts managing thousands+ Linux servers/endpoints

macOS Administration

• Advanced-level Zsh/Bash scripting for macOS environments
• Understanding of macOS-specific tools: launchd, defaults, diskutil, system_profiler
• Experience with MDM concepts, macOS security and privacy features, application management
• Knowledge of macOS versions and compatibility considerations
• Written scripts managing large macOS fleets

Real World Experience

• Automated yourself out of repetitive work and helped others do the same
• Wrote that one script everyone in your org uses because it just works reliably
• Understands the fear of pushing automation to production at 3pm on Friday
• Has war stories about scripts that seemed fine in testing but had unexpected behavior at scale
• Thinks in terms of edge cases: "What if the disk is full? What if the service doesn't exist? What if there are special characters in the filename?"
• Reads release notes for OS updates to see what might break your scripts
• Cares about performance: "This runs in 2 seconds instead of 30 because I used a hash table instead of filtering an array in a loop"
• Values code review: You want someone to catch your mistakes before they hit production

Additional Required Skills

• Python scripting for cross-platform automation
• IT operations mindset: You think about monitoring, alerting, health checks, inventory, compliance, and remediation
• Scale awareness: You understand that code running on 10,000 endpoints needs different error handling, performance optimization, and testing than one-off scripts
• Security consciousness: No hardcoded credentials, input validation, safe file operations, principle of least privilege
• Problem-solving: You can translate "our Windows updates are failing" into a diagnostic script that identifies root causes
• Willingness to learn: If you're a Windows expert, you're excited to learn Linux/Mac (or vice versa) - the fundamentals transfer

Bonus Points

• Experience with OSQuery for cross-platform system querying
• Multi-platform experience (Windows + Linux, or any combination)
• Knowledge of Log Scale/Humio/Splunk or similar log aggregation platforms
• Understanding of cybersecurity concepts (EDR, threat hunting, incident response)
• Experience with endpoint management platforms
• CI/CD pipeline experience (GitHub Actions, Jenkins, GitLab)
• Database experience (MySQL, PostgreSQL, or NoSQL)

Soft Skills

• Attention to detail: A missing quote or improper error handling can impact thousands of endpoints
• Clear communication: Your documentation helps IT teams understand what your scripts do and how to interpret results
• Collaboration: You'll work with product managers, engineers, and customers to understand requirements
• Pragmatism: You balance "perfect" with "ships on time" and know when good enough is good enough
• Continuous learning: Technology changes, OSes evolve, and you stay current
• Ownership mentality: You take pride in your work and stand behind your code

#L