Analyst I, Falcon Complete

This is a fully remote position, open to applicants in Canada.

📋 Description

• Triage, investigate, and respond to security alerts across endpoint, identity, email, network, and cloud environments.

• Analyze EDR telemetry, log sources, and forensic artifacts to identify the root cause and extent of compromise.

• Create targeted remediation recommendations.

• Examine suspicious Microsoft 365 activities, including BEC and AITM attacks.

• Contain threats and provide actionable guidance to customers.

• Conduct basic malware analysis.

• Develop and enhance incident detection and countermeasure processes.

• Act as the primary customer liaison during incident response efforts.

• Generate clear written and verbal communications, recommendations, and findings for customers and internal teams.

⛳️ Requirements

• Candidates must reside in PST and MST time zones.

• Experience in incident management and coordinating responses across a wide array of security events.

• Proven experience in investigating host/user compromises, network breaches, organized crime, and advanced persistent threats.

• Strong working knowledge of attack vectors and threat actor TTPs, with experience implementing MITRE ATT&CK.

• Hands-on experience with forensic analysis tools.

• Capability to perform basic static and dynamic malware analysis.

• Strong understanding of Windows, Mac, and/or Linux operating systems, particularly Windows internals.

• Practical systems administration experience in enterprise environments.

• In-depth knowledge of network protocols and analysis tools.

• Experience with identity and access management platforms like Okta, Microsoft Entra ID, and Active Directory.

• Experience in investigating Microsoft 365 security incidents, including BEC and AITM attacks.

• Familiarity with enterprise log sources and SIEM investigation and triage.

• Basic understanding of incident remediation and containment strategies.

• Knowledge of secure network architecture and troubleshooting network environments.

• Proficiency in Python, PowerShell, or Bash scripting.

• Experience leveraging AI technologies to enhance decision-making and workflows.

• Ability to carry out technical tasks independently.

• Eagerness to grow and develop both technical and interpersonal skills.

• Ability to cultivate a positive work environment and attitude.

• Must be willing to work a 4x10 schedule, including one weekend day.

• This position is only open to US citizens and Green Card holders.

• A BA or BS / MA or MS degree in a relevant field such as computer science, engineering, mathematics, information security, intelligence, or cybersecurity; candidates without a degree but possessing relevant work experience and/or training will also be considered.

• Must maintain legal authorization to work in Canada.

• Subject to background checks, including criminal record, credit, and/or reference checks.

🏝️ Benefits

• Market leader in compensation and equity awards.

• Comprehensive physical and mental wellness programs.

• Competitive vacation and holiday offerings for relaxation and recharge.

• Paid parental and adoption leave.

• Professional development opportunities available to all employees, regardless of position or level.

• Employee Networks, geographic neighborhood groups, and volunteer opportunities to foster connections.

• Dynamic office culture with world-class amenities.

• Variable/incentive compensation.

• Equity.