C

CrowdStrike

Builds cloud software that stops cyberattacks

Professional Services Red Team Intern

Summer 2027Updated
No salary listed
Internship
Bachelor's, Master's, Bachelor of Arts (BA), Bachelor of Science (BS), Master of Arts (MA), Master of Science (MS)
Remote in UK
RemoteInterns are requested to be within a commutable distance to London, Reading, or Edinburgh for social events and team collaboration.
CybersecurityOffensive Security & Testing

About the job

Requirements
  • You must be working towards a BA, BSc, BEng, MA, MSci, or MEng undergraduate degree in Cybersecurity, Computer Forensics, Computer Science, Computer Systems Engineering, Electronic and Electrical Engineering, Mathematics, Information Security, Information Systems, Information Assurance, Information Security Management, Intelligence Studies, Data Science, or another related field; candidates on other courses may be considered where applicable experience and aptitude is demonstrated.
  • You must be in the penultimate year of your undergraduate programme: the second year of a three-year Bachelor’s programme, the third year of a four-year year-in-industry (sandwich) programme, or the third year of a four-year integrated Master’s undergraduate programme.
  • You must be eligible to work in the UK.
  • All employment offers, including for interns, are subject to a full background check.
  • Proven experience utilizing artificial intelligence technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes.
Responsibilities
  • Shadow active red-team operations to gain exposure to all types of red-team engagements.
  • View tactics, techniques, and procedures used by the red team.
  • Interact with the engagement’s project manager and consultants throughout each engagement.
  • Learn the basics of consulting and project-management skills.
  • Manage a mock red-team engagement.
  • Conduct testing against a lab environment to identify multiple security vulnerabilities and misconfigurations.
  • Present findings to red-team mentors in simulated client interactions.
  • Work with the red team’s development team to identify a project to complete during the internship.
  • Complete a project that supports the red team through tooling or process improvement.
  • Use dedicated time to create, test, and demonstrate the project’s capabilities or improvements.
Desired Qualifications
  • Keep up with the latest vulnerabilities and offensive tools, tactics, and procedures.
  • Participate in the security community, such as by contributing to open-source tooling or creating content including blogs and writeups.
  • Have experience with security assessment toolsets such as BloodHound, Cobalt Strike, Burp Suite, or Impacket.
  • Have experience using Windows within an Active Directory environment.
  • Have experience building virtual machines using Windows and Linux.
  • Have experience with capture-the-flag events and cybersecurity competitions.
  • Desirable certifications include CRTO, OSCP, CRTL, OSEP, GPEN, or GXPN.
  • Be familiar with Windows, Linux, UNIX, or Mac operating systems.
  • Have experience in scripting and programming.
  • Be familiar with networking concepts.
  • Understand security methodologies, technologies, and best practices.

About the company

CrowdStrike builds cybersecurity software for organizations that need to protect computers, cloud workloads, identities and data from digital attacks. Its Falcon platform combines these defenses in one cloud system, using a lightweight sensor on devices to collect activity and detect suspicious behavior. Security teams investigate alerts and automate responses through a shared console, while the platform connects information from different parts of a business to reveal attacks that isolated tools miss. Customers pay subscription fees based on the products and assets covered, and CrowdStrike also charges for incident response services. CrowdStrike was founded in 2011 and is based in Austin, Texas.

Company Size

10,001+

Company Stage

IPO

Headquarters

Austin, Texas

Founded

2011

Get referred to CrowdStrike

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Subscription value grew: CrowdStrike's annual recurring revenue reached $5.84 billion, up 25%, for July 2026.
  • Most employees have location flexibility: CrowdStrike designs remote and hybrid teams to work across rooms and time zones.
  • Consulting distribution expands: Wipro launched a Falcon-powered security command center in September 2026.

What critics are saying

  • Staff stability depends on renewals: CrowdStrike flags underused Falcon Flex subscriptions as a reason customers reduce commitments.
  • Outage litigation remains unresolved: CrowdStrike disclosed ongoing Delta discovery and unquantifiable legal losses in August 2026.
  • Premium subscriptions face price pressure: CrowdStrike warns rivals bundle competing security features into products customers already use.

What makes CrowdStrike unique

  • Security spending moves between tools: Falcon Flex lets customers swap modules within a committed subscription budget.
  • CrowdStrike backs managed protection financially: eligible Falcon Complete customers receive up to $2 million in ransomware expense coverage.
  • Human hunters inherit broad visibility: CrowdStrike's OverWatch searches security events from more than 325 data sources.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Competitive Employee Stock Purchase Plan
  • Remote-friendly culture
  • Market leader in compensation and equity awards
  • Competitive vacation and flexible working arrangements
  • Comprehensive health benefits + 401k plan
  • Paid Parental Leave, including adoption
  • Wellness programs
  • Professional development and mentorship opportunities
  • Open offices have stocked kitchens, coffee, soda and treats

Growth & Insights and Company News

6 month growth

1%

1 year growth

2%

2 year growth

2%
Yahoo Finance
Oct 27th, 2026
CrowdStrike vs Fastly: $4.8B-revenue security leader beats cheaper edge rival as 2026 pick

A Motley Fool analysis weighs cybersecurity firm CrowdStrike against edge cloud provider Fastly and favours CrowdStrike as the better 2026 buy. CrowdStrike's revenue for the fiscal year ended January 31, 2026 reached nearly $4.8 billion, up 21.7%, with a net loss of about $162.5 million. Fastly's 2025 revenue was about $624.0 million, up 14.8%, with a net loss of nearly $121.7 million, though its net margin improved to negative 19.5% from negative 29.1%. Fastly is cheaper, at a forward price-to-earnings ratio of 48.8x against 208.9x for CrowdStrike. Fastly also depends on a few large customers, including TikTok and Jio Platforms. The author prefers CrowdStrike as the established leader in a vital market.

U.S. Securities and Exchange Commission
Oct 25th, 2026
EDGAR Filing Documents for 0001852826-21-000003

EIN.: 611897507 | State of Incorp.: DE | Fiscal Year End: 1231Type: D | Act: 33 | File No.: 021-405568 | Film No.: 211079595

Forkast
Oct 24th, 2026
The 2% problem: three vendors built agent-identity governance. Almost nobody is using it.

The 2% problem: three vendors built agent-identity governance. Almost nobody is using it. The machinery to govern AI agents shipped inside 90 days. Only 2% of enterprises have switched it on - while 88% already report agent security incidents. Heath Callahan Forkast mind | 2026-10-24 8:04 AM PDT The number that should stop the room in 2026 is 2%. SailPoint's October 6 announcement put it this way: 79% of enterprises already run AI agents in production - automated workers that complete tasks without a human clicking approve - while only 2% have deployed identity security, the policies and tools that decide which people or machines can touch which data. For every fifty companies running agents, roughly one has bought the machinery built to govern them. That gap is a governance ceiling, not a technology shortage. The machinery arrived this year. At its Navigate conference on October 6, SailPoint expanded its Agentic Fabric with shadow AI discovery (finding agents the organization never sanctioned), runtime authorization (checking each action while it happens), an instant kill switch to disable an agent, and exportable audit evidence for regulators, with capabilities rolling out beginning at the show. In June, Okta expanded its Cross App Access ecosystem to more than 25 partners - a way for agents to connect to business apps through the company's own identity system instead of shared secrets, built on the OAuth authorization standard (the common mechanism that lets one app grant another limited access without handing over a password) and adopted as an official extension of the Model Context Protocol, the standard language AI assistants use to call external tools. Okta opened supported applications through its integration marketplace, the Okta Integration Network, in August. CrowdStrike published its own agent-authorization layer in June, but the post's forward-looking statement says part of it rides the ongoing integration of SGNL technology - a system built to remove standing privileges, the always-on access that never expires - and no general availability date for that piece has been published. All three landed after the OAuth/SAML bypass wave: seven months, eight vendors, one structural failure in the very layer agents now depend on. On the ground, the incidents are already routine. Gravitee's State of AI Agent Security 2026 report, based on a survey of more than 900 executives and practitioners, found 88% of organizations reported confirmed or suspected AI agent security incidents in the last year - the report's own category, incidents and near-misses together. The same survey found only 21.9% of teams treat their agents as independent identities, 45.6% still pass shared API keys (one credential reused across many services), and only 14.4% have full security approval for their entire agent fleet. SpyCloud's 2026 Identity Threat Report, a self-reported survey of 750 security leaders, put compromised non-human identities - the machine accounts software uses to talk to other software - at the top of the breach-entry list: 31% named them the primary way in, against 17% for phishing. And the volume keeps climbing - Rubrik Zero Labs puts non-human identities at 82 to 1 against human users "by some measures." The mismatch in confidence is measurable. Okta's AI Agents at Work 2026 survey - 292 executives and 492 knowledge workers across seven countries - found 96% of executives confident their identity and access management can secure non-human identities, yet only 34% of organizations always apply the same security controls to their AI agents as to their human employees. The same survey found 90% of executives confident in their visibility into AI tools while 52% of employees admit using tools without approval. The market has been building these standards faster than anyone runs them - a pattern its pre-GA standards coverage already flagged.

Yahoo Finance
Oct 24th, 2026
CrowdStrike jumps 8% to $257.57 as CEO warns PHP flaws will trigger a wave of breaches

CrowdStrike shares rose 8.25% to $257.57 on Friday, October 23, 2026, after chief executive George Kurtz warned of a surge in breaches. He said newly disclosed flaws in PHP, the language behind nearly 70% of websites, will lead to "a lot of breaches happening in the coming months." Palo Alto Networks gained 7.22% to $380.55. Okta rose 5.82% and Datadog gained 4.62%. The US federal cyber agency's October 21 alert covered two critical PHP flaws that let unauthenticated attackers run code remotely on web servers. Its October 23 revision reported no observed exploitation in the wild. Kurtz said tens of millions of servers are exposed. He named no company at risk and gave no figure for damage.

Yahoo Finance
Oct 22nd, 2026
Cybersecurity stocks to watch in October 2026: CrowdStrike, Netskope and Tyler Technologies

Simply Wall St has named three cybersecurity stocks from a screener that favours stronger balance sheets. Serious flaws found in PHP this year have pushed governments and companies to take websites offline and rush out fixes. Netskope (NTSK) has a market value of $8.1 billion and about $802.6 million in revenue. Its cloud-native platform secures web, cloud, and software-as-a-service traffic. CrowdStrike Holdings (CRWD) is valued at $233.3 billion, with about $5.4 billion in revenue. Its Falcon Flex subscription model aims to speed up module adoption and deepen customer commitment. Tyler Technologies is valued at $15.4 billion. It earns about $1.8 billion from enterprise software and $621 million from platform technologies, almost all from US public sector clients. The full screen found 30 more companies.