AI-Driven SOC Incident Response Analyst

CrowdStrike Inc.; United States; Remote; USD 85,000 - 120,000; Full time

Benefits offered by this job

Market-leading compensation and equity

Comprehensive wellness programs

Generous vacation and holidays

Paid parental and adoption leave

Professional development opportunities

Employee networks and volunteering

Job summary

CrowdStrike, Inc. seeks highly motivated security analysts to protect customers by triage, investigation, and incident response across endpoints, identity, email, network, and cloud.

Our CrowdStrike virtual SOC offers diverse experiences, real-time detections, and AI-enabled workflows for rapid outcomes. The role emphasizes incident handling, threat analysis, and forensics, with knowledge of Windows, Mac, Linux, and scripting.

Qualifications

• Hands-on incident response across a broad range of security events.
• Experience applying MITRE ATT&CK to investigations.
• Forensic analysis and malware investigation fundamentals.
• Strong OS knowledge across Windows, macOS, Linux.

Responsibilities

• Triage, investigate, and respond to security detections across multiple domains.
• Analyze telemetry, logs, and artifacts to determine root cause and remediation.
• Investigate Microsoft 365 security incidents (BEC/AITM) and provide guidance.
• Perform basic malware analysis to support investigations.
• Develop and improve incident detection and countermeasure processes.
• Communicate clearly with customers and stakeholders during incidents.

Skills

Incident Handling

Threat Landscape Awareness

Computer Forensic Analysis

Malware Analysis

Operating System Fundamentals

Systems Administration

Network Analysis Fundamentals

Identity Platform Awareness

Email Security Awareness

Third-Party Log Analysis

Incident Remediation

Network Operations and Architecture/工程

Programming/Scripting

AI Fundamentals

MITRE ATT&CK Knowledge

Education

Bachelor's degree in CS/Engineering/Math/InfoSec

Job description

CrowdStrike, Inc. seeks highly motivated security analysts to protect customers by triage, investigation, and incident response across endpoints, identity, email, network, and cloud.

Our CrowdStrike virtual SOC offers diverse experiences, real-time detections, and AI-enabled workflows for rapid outcomes. The role emphasizes incident handling, threat analysis, and forensics, with knowledge of Windows, Mac, Linux, and scripting.