Analyst I, Falcon Complete

This is a fully remote position, open to applicants in Canada.

📋 Description

• Assess, investigate, and respond to security alerts across endpoint, identity, email, network, and cloud environments.

• Examine EDR telemetry, log sources, and forensic artifacts to identify the root cause and extent of a compromise.

• Create tailored remediation recommendations.

• Investigate suspicious activities within Microsoft 365, including BEC and AITM attacks.

• Mitigate threats and provide actionable advice to customers.

• Conduct basic malware analysis.

• Enhance incident detection and countermeasure execution processes.

• Act as the primary contact for customers during incident response activities.

• Generate clear, concise, and professional written and verbal communications, recommendations, and findings.

• Identify and respond to incidents in real-time for clients through CrowdStrike’s virtual security operations center.

⛳️ Requirements

• Proven experience in incident handling and coordinating incident responses across a wide array of security events.

• Experience in investigating host/user compromises, network breaches, organized crime, and advanced persistent threats.

• Comprehensive knowledge of attack vectors, threat actor TTPs, and MITRE ATT&CK.

• Hands-on experience with computer forensic analysis tools.

• Ability to perform basic static and dynamic malware analysis.

• Strong understanding of Windows, Mac, and/or Linux operating systems, including Windows internals.

• Practical systems administration experience in enterprise environments.

• In-depth knowledge of network protocols and analysis tools.

• Experience with identity and access management platforms such as Okta, Microsoft Entra ID, and Active Directory.

• Experience in investigating Microsoft 365 security incidents, including BEC and AITM attacks.

• Familiarity with enterprise log sources and SIEM investigation and triage.

• Basic understanding of incident remediation and containment on third-party platforms.

• Working knowledge of secure network architecture and network troubleshooting.

• Proficiency in Python, PowerShell, or Bash scripting.

• Experience leveraging AI technologies to improve decision-making and workflows.

• Must be willing to work a 4x10 schedule, including one day on the weekend.

• BA or BS / MA or MS degree in a relevant technical or related field; candidates without a degree but with applicable work experience and/or training will be considered.

• Must possess legal eligibility to work in Canada.

• Subject to background checks, including criminal record, credit, and/or reference checks.

🏝️ Benefits

• Competitive compensation and equity awards, positioning us as a market leader.

• Comprehensive physical and mental wellness programs.

• Generous vacation and holiday allowances for relaxation.

• Paid parental and adoption leaves.

• Opportunities for professional development for all employees, regardless of level or role.

• Employee Networks, geographic neighborhood groups, and volunteer opportunities to foster connections.

• A vibrant office culture featuring world-class amenities.