Senior Analyst, Falcon Complete

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee intricate investigations across endpoint, identity, email, network, and cloud settings.

• Act as the technical lead for incidents that are high-severity and involve multiple customers.

• Examine EDR telemetry, forensic evidence, and network information to establish root causes, attacker TTPs, and the extent of the breach.

• Probe into advanced Microsoft 365 attacks, such as BEC and AITM, while offering expert guidance to clients.

• Conduct static and dynamic malware assessments to pinpoint threat behaviors and indicators of compromise.

• Formulate and implement strategic and tactical remediation strategies, coordinating containment actions with third parties.

• Mentor and nurture the development of Analyst team members.

• Contribute to the creation of training materials, knowledge base content, and team capability enhancement.

• Propel process enhancements, assist in SOP development, and foster automation initiatives.

• Represent CrowdStrike through blogging, CrowdCasts, and public speaking opportunities.

• Provide expert-level customer communications and manage technical escalations during critical situations.

⛳️ Requirements

• Extensive background in incident response, threat landscape awareness, computer forensic analysis, malware evaluation, operating system principles, systems administration, network analysis, identity platforms, email security, third-party log assessments, incident remediation, network operations and architecture/engineering, programming/scripting, and AI platforms.

• Expert-level experience leading complex incident response investigations, including high-severity, multi-host, and multi-customer scenarios.

• Profound knowledge of attack vectors, tactics, techniques, and procedures used by threat actors, with advanced proficiency in applying and extending MITRE ATT&CK.

• Advanced skills in forensic analysis across host, memory, and network artifacts.

• Advanced ability in static and dynamic malware analysis, including reverse engineering concepts and behavioral assessment.

• Expert-level understanding of Windows, Mac, and/or Linux operating systems, with particular expertise in at least one.

• Advanced experience in administering and securing enterprise network environments.

• Expert-level knowledge of network protocols and traffic examination.

• In-depth expertise with Okta, Microsoft Entra ID, and Active Directory.

• Advanced experience in investigating and resolving Microsoft 365 security incidents, including BEC and AITM attacks.

• Advanced proficiency in querying and correlating logs within SIEM environments.

• Proven capability in developing and executing remediation plans for compromised systems.

• Experience in scripting and automation development using Python, PowerShell, or Bash.

• Familiarity with AI models, platforms, MCP servers, agentic frameworks, prompt engineering, and AI adoption.

• Capacity to independently lead complex technical investigations as a subject matter expert.

• Demonstrated commitment to mentoring peers and junior team members.

• Thought leadership in the incident response industry.

• Project management skills with the ability to drive process improvements to fruition.

• Ability to cultivate a positive work atmosphere and attitude.

• Must be willing to work a 4x10 schedule, including one weekend day.

• BA or BS / MA or MS degree in a relevant technical or related field, or equivalent work experience and/or training in place of a degree.

• Must successfully undergo and pass alcohol and/or drug tests if required during employment.

🏝️ Benefits

• Market leader in compensation and equity awards.

• Comprehensive physical and mental wellness initiatives.

• Competitive vacation and holiday policies for rejuvenation.

• Paid parental and adoption leave.

• Opportunities for professional development for all employees, regardless of level or role.

• Employee Networks, neighborhood groups, and volunteer opportunities to foster connections.

• Dynamic office culture with world-class amenities.

• Bonuses.

• Equity grants.

• Health insurance.

• 401k.

• Paid time off.