At CrowdStrike we’re on a mission – to stop breaches. Our groundbreaking technology, services delivery, and intelligence gathering together with our innovations in machine learning and behavioral-based detection, allow our customers to not only defend themselves, but do so in a future-proof manner. We’ve earned numerous honors and top rankings for our technology, organization and people – clearly confirming our industry leadership and our special culture driving it. We also offer flexible work arrangements to help our people manage their personal and professional lives in a way that works for them. So if you’re ready to work on unrivaled technology where your desire to be part of a collaborative team is met with a laser-focused mission to stop breaches and protect people globally, let’s talk.
The Platform
CrowdStrike Falcon is a two-component security product. One component is a “sensor”, which is a lightweight agent installed on client machines that observes system activity and recognizes malicious behavior, then provides on-box prevention capability and remote telemetry to the Falcon cloud. The cloud component aggregates sensor telemetry for each customer’s network, can correlate malicious behavior across multiple machines, and presents our customers’ operations teams with a prioritized summary of the threats detected in their environments.
The Product Group
The IT Security Operations (ITSecOps) product group in CrowdStrike focuses on building products and providing solutions that help the ITSecOps stakeholders and IT & Security operations teams to keep their enterprise secure while reducing risks. These products includes vulnerability management (Spotlight), IT inventory and assets tracking (Discover), File Integrity Monitoring (FIM), and more. The objective of these solutions is to enable customers to prioritize and remediate vulnerabilities, monitor & manage incidents, and to systematically address compliance violations through an integrated and automated approach across their data-centers/multi-cloud enterprise environments.
The Product
Falcon Spotlight is the industry’s first scan-less endpoint vulnerability assessment solution, delivering real-time, zero-impact assessments of endpoint security posture. Falcon Spotlight adds preparation and readiness to the unparalleled prevention, detection and response provided by the Falcon platform, resulting in a stronger security posture and unprecedented breach protection.
About the Role
This is a (Senior) Software Test Engineer position in the engineering team. This role focusses on development of end-to-end test strategy and test plan for the Spotlight and potentially other products in IT SecOps Product group, vulnerability content testing. This person also coordinates test bed creation/updates and test execution with external contractors. The person designs and develops the tools required for enabling testing, test scenario development. Partly, the person also helps in enhancing test automation framework and scripts, tools, harnesses and in end-to-end testing of the product. This person may be required to contribute in writing some automated tests as well as collaborate with SDET/Dev to assure end-to-end functionality of vulnerability content meets the quality requirements. They may also work with customers and product management to understand use cases and end to end scenarios.
Responsibilities
- Developing the overall test strategy and test plan for (manual) testing of enterprise class products and systems, specifically products involving content management systems.
- Identify and write specialized tests for specific applications and platforms such as Windows, Linux and MacOS to ensure the content development for those meet the quality & accuracy criteria and that there are no/minimal False-Positives, False-Negatives in the content.
- Works collaboratively with rest of the team to control risk, improve quality, and streamline release cycles in a continuous integration model
- Designs, develops, and maintains a reliable testing environment and system for effectively measuring & validating Spotlight content initially based on manual testing, growing into an automation framework over a period of time.
- Generates appropriate test reports in a time to time manner and shares it with the stakeholders to provide accurate state of the quality and efficacy of the content management system. Provides essential feedback to the development and automation team based on learnings from manual tests to help them enhance automation coverage for desired scenarios and patterns.
- Coordinates and collaborates with external vendor contractors to create approach for test bed creation based on test scenarios, developing test scenarios based on the required sampling of use cases for various operating systems and the hundreds of native & 3rd party applications supported on those OS/platforms.
- Leads, mentors and trains external contractors for them to gain the necessary understanding of vulnerability assessment domain and the product for testing content for new platforms and applications.
- Works with support team/customers and product management to understand issues reported in Spotlight content, reproduces such issues, helps perform root cause and tests fixes provided by the development team. If required, the person may need to help in testing the end to end product use cases in regards to the content.
- Learns and occasionally helps in developing and/or enhancing the test automation system.
Requirements for the candidate
- Relevant software testing experience of 9 to 12+ years and experience in testing enterprise class products and applications.
- Proven experience in coming up with strategy for manual testing, developing effective test plan, and executing actual tests to ensure desired quality of product is assured based on validations.
- Awareness of vulnerability management domain and essential experience in testing vulnerability management content and/or other content management systems for security products.
- Hands on experience in developing test management system and test beds in data center, hybrid cloud and/or public cloud environment.
- Should have a sound knowledge of virtualization environments, creating required VM images and developing large test rigs for multiple test scenarios. Should have an essential Networking concepts and hands on knowledge of applying those for test environments.
- Be able to do required tooling and/or use well-known tools and industry best practices in order to create an effective and reliable testing environment.
- Ability to collaborate with the peers, development team and program managers in a distributed environment effectively
- Knowledge of Ansible, Jira, TestRail is good to have.
- Hands on experience to any of the CI/CD tools and process such as Jenkins is an added advantage.
- Awareness and experience in writing quality automation code in any scripting or programing language is a plus.
- Knowledge of enterprise applications deployed to cloud environments such as AWS is a plus.