Investigate endpoint, identity, email, network, and cloud detections remotely for CrowdStrike Falcon Complete across PST and MST time zones.
As an Analyst I, you will detect and respond to incidents in CrowdStrike’s virtual security operations center. Apply EDR telemetry, forensic artifacts, malware analysis, and customer communication skills. Support global organizations facing advanced attackers while developing incident detection and countermeasure processes.
Key Responsibilities:
Triage and investigate security detections across enterprise environments
Analyze telemetry, logs, and forensic artifacts
Investigate Microsoft 365 BEC and AITM activity
Perform basic static and agile malware analysis
Communicate findings and remediation guidance to customers
Requirements:
Experience with incident handling or information security
Knowledge of attack vectors, TTPs, and MITRE ATT&CK;
Understanding of Windows, Mac, or Linux systems
Experience with SIEM, identity platforms, and network analysis
Willingness to work four ten-hour shifts, including weekends
Use incident response, malware analysis, and customer communication skills to protect organizations through Falcon Complete.