Protect global organizations remotely from British Columbia or Alberta using incident response and endpoint security expertise. Work within PST or MST time zones.

As an Analyst I on CrowdStrike’s Falcon Complete team, you will detect and respond to customer incidents in real time. The virtual security operations center covers endpoint, identity, email, network, and cloud environments. Your work includes EDR telemetry, forensic artifacts, Microsoft 365 investigations, malware analysis, and customer communications.

Key Responsibilities

Triage, investigate, and respond to security detections

Analyze EDR telemetry, logs, and forensic artifacts

Investigate Microsoft 365 BEC and AITM activity

Perform basic static and energetic malware analysis

Deliver clear customer recommendations and findings

Requirements

Incident response or information security experience

Knowledge of MITRE ATT&CK; and threat actor TTPs

Understanding of Windows, Mac, or Linux systems

Experience with SIEM, identity, email, and network analysis

Willingness to work four ten-hour shifts, including weekends

Apply technical investigation, remediation, communication, and AI capabilities as a CrowdStrike Falcon Complete cybersecurity analyst.

📌 Cybersecurity Incident Response Analyst (Winnipeg)
🏢 CrowdStrike
📍 Winnipeg