Global Cybersecurity Incident Response Leader (Remote)

Crimson Education; Auckland; Remote; NZD 85,000 - 140,000; Full time

Benefits offered by this job

Market-leading compensation

Wellness programs

Vacation & holidays

Parental leave

Professional development

Employee networks

Office culture and amenities

Great Place to Work certification

Job summary

CrowdStrike is seeking a highly motivated analyst to join our global Security Operations Center. You will triage, investigate, and respond to detections across endpoints, identity, email, network, and cloud environments, using AI-driven tools and frameworks to drive rapid remediation.

You will analyze telemetry and artefacts to determine root causes, investigate targeted threats in Microsoft 365, and communicate findings clearly to customers and colleagues.

Qualifications

• Hands-on incident response across hosts and networks
• Experience applying MITRE ATT&CK to investigations
• Using forensic tools in incident investigations
• Ability to perform basic malware analysis
• Strong Windows, macOS, Linux OS knowledge
• Experience administering networks and resolving connectivity issues
• Knowledge of network protocols and traffic analysis
• Proven use of AI to improve security decisions and workflows

Responsibilities

• Triage, investigate, and respond to detections across endpoint, identity, email, network and cloud environments
• Analyze telemetry and artefacts to determine root cause and scope of compromise
• Investigate suspicious Microsoft 365 activity and contain threats
• Perform basic malware analysis to support investigations
• Develop and improve incident detection processes and countermeasures
• Deliver clear customer communications during incident response
• Produce written and verbal findings to customers and internal teams

Skills

Incident Handling

Threat Landscape Awareness

Computer Forensic Analysis

Malware Analysis

Operating System Fundamentals

Systems Administration

Network Analysis

AI technologies in security

Job description

CrowdStrike is seeking a highly motivated analyst to join our global Security Operations Center. You will triage, investigate, and respond to detections across endpoints, identity, email, network, and cloud environments, using AI-driven tools and frameworks to drive rapid remediation.

You will analyze telemetry and artefacts to determine root causes, investigate targeted threats in Microsoft 365, and communicate findings clearly to customers and colleagues.