Remote Cyber Defense Analyst I — Incident Response

CrowdStrike Inc.; Santa Fe (NM); On-site; USD 85,000 - 120,000; Full time

Benefits offered by this job

Market leading compensation

Equity awards

Wellness programs

Professional development

Great Place to Work Certified

Job summary

CrowdStrike is seeking a highly motivated analyst to protect global customers by triaging, investigating, and responding to security detections across endpoints, identity, email, network, and cloud environments.

You will analyze EDR telemetry, perform malware analysis, and deliver actionable remediation guidance while collaborating with customers. The role emphasizes AI-enabled security workflows and ongoing skill growth.

Qualifications

• Experience conducting and coordinating incident response across security events.
• Knowledge of MITRE ATT&CK and threat actor tactics.
• Hands-on experience with forensic analysis tools in incident investigations.
• Ability to perform basic static and dynamic malware analysis.

Responsibilities

• Triage, investigate, and respond to security detections across endpoint, identity, email, network, and cloud environments.
• Analyze telemetry and artifacts to determine root cause and remediation.
• Investigate Microsoft 365 activity and contain threats.
• Perform basic malware analysis to support investigations.
• Improve incident detection processes and countermeasures.
• Deliver clear customer communications during incident response.
• Produce written and verbal findings to customers and internally.

Skills

Incident Handling

Threat Landscape

Forensic Analysis

Malware Analysis

OS Fundamentals

Systems Administration

Network Analysis

Identity Platforms

Email Security

Log Analysis

Incident Remediation

Network Operations

AI Fundamentals

Scripting

Education

BA/BS or MA/MS in a related field

Tools

Python

PowerShell

Job description

CrowdStrike is seeking a highly motivated analyst to protect global customers by triaging, investigating, and responding to security detections across endpoints, identity, email, network, and cloud environments.

You will analyze EDR telemetry, perform malware analysis, and deliver actionable remediation guidance while collaborating with customers. The role emphasizes AI-enabled security workflows and ongoing skill growth.