CrowdStrike Falcon Threat Hunter & IR Analyst

ComTec Information Systems (IT); The Woodlands (TX); On-site; USD 85,000 - 125,000; Full time

Job summary

CrowdStrike Analyst in The Woodlands, TX or Little Rock, AR is sought to monitor and investigate endpoint threats using the CrowdStrike Falcon platform. The role focuses on threat detection, incident response, and proactive threat hunting to strengthen endpoint security.

You will analyze telemetry, correlate data with SIEMs like Splunk, develop detection queries with CQL, and coordinate containment and remediation.

Qualifications

• 3+ years hands-on with CrowdStrike Falcon or equivalent EDR/XDR.
• Strong threat detection, threat hunting, incident response, and endpoint investigation.
• Experience with Windows/Linux security, malware/ransomware, attacker techniques.
• Knowledge of MITRE ATT&CK, IOC/IOA analysis, threat intelligence, and SIEM correlations.

Responsibilities

• Monitor and investigate alerts using CrowdStrike Falcon.
• Perform threat detection, hunting, incident investigation, and response.
• Analyze endpoint telemetry, processes, network activity, and file behavior.
• Investigate malware, ransomware, phishing, credential attacks, and PowerShell activity.
• Use CrowdStrike Falcon Insight/EDR for investigation and response.
• Develop and tune detection queries and workflows with CQL.
• Proactive threat hunting using MITRE ATT&CK and threat intel.
• Correlate CrowdStrike data with Splunk, Cribl, and other sources.
• Coordinate containment, remediation, and recovery activities.
• Use CrowdStrike APIs and scripting to improve operations.
• Support AI-assisted workflows where applicable.
• Document incidents, findings, root cause, and remediation actions.

Skills

CrowdStrike Falcon

Threat detection

Incident response

Endpoint investigation

MITRE ATT&CK

Splunk SIEM

Scripting

SOAR automation

Communication skills

Tools

CrowdStrike EDR

CQL

Python

PowerShell

Splunk

Cribl

SOAR platforms

Job description

CrowdStrike Analyst in The Woodlands, TX or Little Rock, AR is sought to monitor and investigate endpoint threats using the CrowdStrike Falcon platform. The role focuses on threat detection, incident response, and proactive threat hunting to strengthen endpoint security.

You will analyze telemetry, correlate data with SIEMs like Splunk, develop detection queries with CQL, and coordinate containment and remediation.