Cybersecurity Analyst I - Incident Response (Remote)

CrowdStrike Inc.; Atlanta (GA); Hybrid; USD 85,000 - 120,000; Full time

Benefits offered by this job

Competitive compensation and equity

Wellness programs

Paid time off

Parental leave

Professional development

Employee networks

Job summary

CrowdStrike, Inc. is seeking an Associate Analyst for Endpoint Protection to detect and respond to security incidents in real-time across endpoints, identity, email and cloud. The role emphasizes clear customer communications and rapid triage of alerts to protect global customers in a remote-capable posture.

You will work with a diverse team, leveraging AI-enhanced workflows and a strong emphasis on professional growth. Requires a BA/BS and foundational IT/security knowledge.

Qualifications

• Training or foundational knowledge in incident response processes.
• Foundational knowledge of attack vectors, TTPs and MITRE ATT&CK.
• Understanding of Windows, Mac and Linux OS fundamentals.
• Experience with scripting (Python, PowerShell, Bash).

Responsibilities

• Deliver clear, professional customer communications as the first point of contact.
• Produce written and verbal communications, recommendations and findings to customers and internally.
• Triage, investigate, and respond to security alerts across endpoints, identity, email and cloud.
• Analyze EDR telemetry, logs, and artifacts to identify scope of compromise and remediation actions.
• Investigate suspicious Microsoft 365 activity including BEC and AITM, contain threats and guide customers.
• Develop and improve incident detection processes and countermeasures.

Skills

Incident Handling

Threat Landscape Awareness

OS Fundamentals

Programming/Scripting

AI Fundamentals

Education

BA/BS in CS or related field

Job description

CrowdStrike, Inc. is seeking an Associate Analyst for Endpoint Protection to detect and respond to security incidents in real-time across endpoints, identity, email and cloud. The role emphasizes clear customer communications and rapid triage of alerts to protect global customers in a remote-capable posture.

You will work with a diverse team, leveraging AI-enhanced workflows and a strong emphasis on professional growth. Requires a BA/BS and foundational IT/security knowledge.