Analyst I, Falcon Complete

This is a fully remote position, open to applicants in United States.

📋 Description

• Assess, investigate, and react to security alerts across endpoint, identity, email, network, and cloud environments.

• Perform tactical analysis on EDR telemetry, log sources, and forensic artifacts to identify root causes and the extent of compromises.

• Create specific remediation recommendations.

• Examine suspicious Microsoft 365 activities, including BEC and AITM attacks.

• Mitigate threats and provide actionable recommendations to customers.

• Conduct basic malware analysis to assist in incident investigation and triage.

• Enhance and refine incident detection processes and countermeasures.

• Act as the main point of contact for customers during incident response activities.

• Generate clear, concise, and professional written and verbal communications, recommendations, and findings for both customers and internal stakeholders.

⛳️ Requirements

• This role is available for candidates located in PST and MST time zones.

• Experience in one or more areas such as incident handling, threat landscape awareness, computer forensic analysis, malware analysis, operating system fundamentals, systems administration, network analysis, identity platform knowledge, email security awareness, third-party log analysis, incident remediation, network operations and architecture/engineering, programming/scripting, or AI fundamentals.

• Practical incident response experience across a wide range of security events, including managing multiple simultaneous incidents across hosts and customer environments.

• Familiarity with attack vectors, threat actor TTPs, and frameworks such as MITRE ATT&CK.

• Proficient in using forensic analysis tools.

• Capability to perform basic static and dynamic malware analysis.

• Strong knowledge of Windows, Mac, and/or Linux operating systems, including Windows internals.

• Hands-on systems administration experience in enterprise environments.

• Understanding of network protocols and analysis tools.

• Experience with identity and access management platforms such as Okta, Microsoft Entra ID, and Active Directory.

• Experience examining Microsoft 365 security incidents, including BEC and AITM attacks.

• Familiarity with enterprise log sources and experience conducting investigations and triage within a SIEM platform.

• Basic comprehension of threat containment and remediation measures.

• Knowledge of secure network architecture and practical network troubleshooting skills.

• Proficient in Python, PowerShell, or Bash scripting.

• Experience leveraging AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business results.

• Ability to perform technical tasks independently.

• Eagerness to develop and enhance both technical and soft skills.

• Capability to promote a positive work environment and attitude.

• Must be willing to work a 4x10 schedule, including one day on the weekend.

• BA or BS / MA or MS degree in a relevant technical or related field, or equivalent work experience and/or training will be taken into account.

• Must pass alcohol and/or drug tests if required during employment.

🏝️ Benefits

• Competitive compensation and equity awards as a market leader.

• Comprehensive programs for physical and mental wellness.

• Generous vacation and holiday policies for recharging.

• Paid parental and adoption leave.

• Opportunities for professional development accessible to all employees, regardless of level or role.

• Employee Networks, neighborhood groups, and volunteer opportunities to foster connections.

• Dynamic office culture featuring world-class amenities.

• Bonuses.

• Equity grants.

• Health insurance.

• 401k plan.

• Paid time off.