Protect global organizations remotely from British Columbia or Alberta using incident response and endpoint security expertise. Work within PST or MST time zones.

As an Analyst I on CrowdStrike’s Falcon Complete team, you will detect and respond to customer incidents in real time. The virtual security operations center covers endpoint, identity, email, network, and cloud environments. Your work includes EDR telemetry, forensic artifacts, Microsoft 365 investigations, malware analysis, and customer communications.

Key Responsibilities:

- Triage, investigate, and respond to security detections
- Analyze EDR telemetry, logs, and forensic artifacts
- Investigate Microsoft 365 BEC and AITM activity
- Perform basic static and energetic malware analysis
- Deliver clear customer recommendations and findings

Requirements:

- Incident response or information security experience
- Knowledge of MITRE ATT&CK; and threat actor TTPs
- Understanding of Windows, Mac, or Linux systems
- Experience with SIEM, identity, email, and network analysis
- Willingness to work four ten-hour shifts, including weekends

Apply technical investigation, remediation, communication, and AI capabilities as a CrowdStrike Falcon Complete cybersecurity analyst.

📌 Cybersecurity Incident Response Analyst (British Columbia)
🏢 CrowdStrike
📍 British Columbia