Incident Response Analyst I — Hybrid (Security & Forensics)

CrowdStrike; United States; Hybrid; USD 85,000 - 120,000; Full time

Benefits offered by this job

Market-leading compensation

Wellness programs

Vacation & holidays

Parental and adoption leaves

Professional development

Employee networks

Vibrant office culture

Great Place to Work Certified

Job summary

CrowdStrike is seeking a highly motivated, self‑driven analyst to protect customers globally by detecting, containing, and remediating incidents. You’ll work in a security operations center, handling Windows, Mac, and Linux endpoints, and communicating findings to customer management.

The role emphasizes malware analysis, process improvement, and leveraging AI technologies to accelerate responses and drive outcomes within a mission‑driven environment.

Qualifications

• Experience in incident handling for organizations and targeted threats.
• Background using forensic analysis tools in incident response.
• Understanding of system internals for countermeasures and remediation.
• Knowledge of network protocols and network log analysis.
• Ability to perform static and dynamic malware analysis.
• Strong understanding of targeted attacks and remediation planning.
• Experience with secure network architecture and network operations.
• Programming experience in Python, C#, VB, or similar.

Responsibilities

• Exercise incident handling across Windows, Mac, and Linux.
• Perform basic malware analysis and remediation work.
• Improve detection processes and countermeasure execution.
• Produce high quality written and verbal communications to customers.
• Contribute thought leadership via blog posts and events.

Skills

Incident handling

Malware analysis

Forensic analysis

Systems administration

Network forensics

Programming scripting

AI technologies

Customer interaction

Education

BA/BS in CS or related field

Tools

Forensic tools

Job description

CrowdStrike is seeking a highly motivated, self‑driven analyst to protect customers globally by detecting, containing, and remediating incidents. You’ll work in a security operations center, handling Windows, Mac, and Linux endpoints, and communicating findings to customer management.

The role emphasizes malware analysis, process improvement, and leveraging AI technologies to accelerate responses and drive outcomes within a mission‑driven environment.