Senior Threat Hunter & Incident Response Lead

Crowdstrike Australia Pty Limited; Queensland; On-site; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Compensation

Wellness programs

Vacation & holidays

Parental leave

Professional development

Employee networks

Office culture

Great Place to Work

Job summary

CrowdStrike Australia Pty Limited is seeking a Senior Analyst for the Endpoint Protection Team to lead high-severity investigations across endpoints, identity, email, network, and cloud environments.

You will analyze EDR telemetry, forensic artifacts, and network data to determine root causes and attacker TTPs, guiding customers through complex incidents with clear, expert guidance. You will also mentor teammates and drive improvements in detection and response processes.

Qualifications

• Incident Handling: leading and managing complex incident responses, ownership of high-severity multi-host incidents.
• Threat Landscape Awareness: deep knowledge of attack vectors, MITRE ATT&CK mapping for detection.
• Computer Forensic Analysis: examine host/memory/network artifacts to determine full scope of compromise.
• Malware Analysis: static and dynamic analysis and behavior understanding.

Responsibilities

• Lead complex investigations across endpoint, identity, email, network, and cloud environments as technical lead for high-severity incidents.
• Analyze EDR telemetry, forensic artifacts, and network data to determine root cause and attacker TTPs.
• Investigate Microsoft 365 attacks including BEC and AITM; provide expert guidance to customers.
• Perform malware analysis to inform detection and remediation strategies.
• Develop and lead remediation plans including coordinating containment actions across customer infra.
• Mentor Analyst team members and contribute to training materials and knowledge base.
• Identify and drive process improvements; develop SOPs and automation to enhance detection and response.
• Represent CrowdStrike through thought leadership, blogs, and external speaking engagements.
• Deliver expert customer communications and manage escalations during critical incidents.

Skills

Incident Handling

Threat Landscape

Forensic Analysis

Malware Analysis

AI in Security

Job description

CrowdStrike Australia Pty Limited is seeking a Senior Analyst for the Endpoint Protection Team to lead high-severity investigations across endpoints, identity, email, network, and cloud environments.

You will analyze EDR telemetry, forensic artifacts, and network data to determine root causes and attacker TTPs, guiding customers through complex incidents with clear, expert guidance. You will also mentor teammates and drive improvements in detection and response processes.