Focusing on securing open-source software and upstream dependencies, the full-time remote Security Engineer II will assess risks, implement security controls, and collaborate on projects to protect CrowdStrike's software supply chain and code-hosting environments. Key responsibilities Assess risk and provide security guidance on open-source software usage and repository configurations Design, implement, and maintain security tools and processes for GitHub organizations, including repository guardrails and secret scanning Investigate open-source dependencies and third-party packages to mitigate supply chain risks Required qualifications Experience in an engineering role implementing and monitoring software security systems Strong working experience with GitHub, including repository administration and access management Experience identifying and mitigating open-source vulnerability risks Proficiency in one or more scripting languages, such as Python, Golang, or Shell Domain knowledge of the software development lifecycle and secure coding practices