Analyst I, Falcon Complete

This is a fully remote position, open to applicants in Texas.

📋 Description

• Assess, investigate, and respond to security alerts across endpoint, identity, email, network, and cloud settings.

• Perform tactical analysis of EDR telemetry, log sources, and forensic evidence to ascertain the root cause and extent of compromise.

• Create tailored remediation recommendations.

• Examine suspicious Microsoft 365 activities, including BEC and AITM attacks.

• Mitigate threats and provide actionable advice to clients.

• Conduct basic malware analysis to aid in security incident investigation and triage.

• Enhance incident detection processes and implement countermeasures.

• Provide clear, concise, and professional communication to customers as the main point of contact during incident response efforts.

• Generate written and verbal reports, recommendations, and findings for customers and internal stakeholders.

⛳️ Requirements

• This role is available to candidates located in San Antonio, TX.

• Experience in one or more areas including incident handling, threat landscape awareness, computer forensic analysis, malware analysis, operating system fundamentals, systems administration, network analysis, identity platforms, email security, third-party log analysis, incident remediation, network operations and architecture/engineering, programming/scripting, or AI fundamentals.

• Practical incident response experience across a diverse range of security events and the ability to handle multiple incidents simultaneously.

• Understanding of attack vectors, threat actor TTPs, and frameworks such as MITRE ATT&CK.

• Proficiency in using forensic analysis tools.

• Capability to conduct basic static and dynamic malware analysis.

• Strong grasp of Windows, Mac, and/or Linux operating systems, particularly Windows internals.

• Hands-on experience with systems administration in enterprise environments.

• Familiarity with network protocols and analysis tools.

• Experience with identity and access management platforms such as Okta, Microsoft Entra ID, and Active Directory.

• Background in investigating Microsoft 365 security incidents, including BEC and AITM attacks.

• Working knowledge of enterprise log sources and SIEM investigation and triage.

• Understanding of incident remediation and containment strategies.

• Experience troubleshooting and navigating secure network environments.

• Proficiency in Python, PowerShell, or Bash scripting.

• Experience utilizing AI technologies to enhance decision-making and streamline workflows.

• Able to complete technical tasks independently.

• Willingness to grow and develop both technical and interpersonal skills.

• Ability to promote a positive work atmosphere and attitude.

• Must be available to work a 4x10 schedule, including one weekend day.

• BA or BS / MA or MS degree in a relevant technical field; applicants without a degree but with pertinent work experience and/or training will be considered.

• May be required to periodically undergo and pass alcohol and/or drug tests during employment.

🏝️ Benefits

• Competitive compensation and equity awards.

• Comprehensive wellness programs for physical and mental health.

• Generous vacation and holiday policies for relaxation.

• Paid parental and adoption leave.

• Opportunities for professional development for all employees, regardless of level or role.

• Access to Employee Networks, community groups, and volunteer opportunities to foster connections.

• Dynamic office culture featuring world-class amenities.

• Health insurance coverage.

• 401k plan.

• Paid time off.

• Eligibility for performance bonuses.

• Equity grants.