Cybersecurity SOC Analyst I - Hybrid, Endpoint Protection

CrowdStrike, Inc.; Sunnyvale (CA); Hybride; USD 85 000 - 120 000; Plein temps

Avantages offerts par ce poste

Market leader compensation

Comprehensive wellness programs

Professional development opportunities

Résumé du poste

CrowdStrike, Inc. in Sunnyvale, CA is seeking an Associate Analyst for the Endpoint Protection Team to help protect organizations against advanced threats. The role offers hybrid onsite work and a chance to grow in a mission-driven cybersecurity company.

You will triage alerts, conduct tactical analysis of EDR telemetry, respond to incidents, and develop improved detection and remediation processes, while collaborating with customers and colleagues in a fast-paced environment.

Qualifications

• Training or foundational knowledge in incident response processes.
• Familiarity with MITRE ATT&CK framework.
• Understanding of Windows, Mac, and Linux operating systems.
• Experience administering a network and troubleshooting connectivity/authentication issues.
• Knowledge of network protocols and logs.
• Familiarity with identity platforms such as Okta, Entra ID and AD.
• Experience with Microsoft 365 security and BEC.
• Foundational log analysis across cloud/network/devices.
• Remediation for targeted attacks.

Responsabilités

• Deliver clear, concise customer communications as the first point of contact.
• Produce high-quality written and verbal communications, recommendations and findings.
• Triage, investigate, and respond to security alerts across endpoint, identity, email, and cloud environments.
• Conduct tactical analysis of EDR telemetry, logs and artifacts to identify scope of compromise and support remediation.
• Investigate suspicious Microsoft 365 activity including BEC and adversary-in-the-middle attacks, contain the threat, and provide actionable guidance.
• Develop and improve processes for incident detection and countermeasures execution.

Connaissances

Incident Handling

Threat Landscape Awareness

OS Fundamentals

Systems Administration

Network Analysis

Identity & Access

Email Security

Log Analysis

Incident Remediation

Network Security

Programming/Scripting

AI Fundamentals

AI in Security

Formation

BA/BS or MA/MS in CS/Engineering/InfoSec

Outils

Okta

Microsoft Entra ID

Active Directory

Description du poste

CrowdStrike, Inc. in Sunnyvale, CA is seeking an Associate Analyst for the Endpoint Protection Team to help protect organizations against advanced threats. The role offers hybrid onsite work and a chance to grow in a mission-driven cybersecurity company.

You will triage alerts, conduct tactical analysis of EDR telemetry, respond to incidents, and develop improved detection and remediation processes, while collaborating with customers and colleagues in a fast-paced environment.