Remote Cyber Defense Analyst - Incident Response

CrowdStrike Inc.; Richmond (VA); Remote; USD 85,000 - 120,000; Full time

Benefits offered by this job

Market-leading compensation

Comprehensive wellness programs

Paid time off and holidays

Parental/adoption leave

Job summary

CrowdStrike, Inc. is hiring an Analyst, Endpoint Protection Team Candidate to join our security operations center. You will triage, investigate, and respond to detections across endpoints, identity, and cloud environments, providing remediation guidance and customer-facing communications.

The role requires strong incident handling, malware analysis, and scripting skills, with a BA/BS or higher in a related field. A 4x10 schedule is expected, and candidates in the U.S. are preferred.

Qualifications

• Bachelor's degree or higher in a relevant field.
• Experience in incident response and security investigations.
• Knowledge of MITRE ATT&CK framework and threat hunting basics.

Responsibilities

• Triage, investigate, and respond to security detections across endpoints, identity, email, network, and cloud environments.
• Conduct tactical analysis of telemetry and forensic artifacts to determine root cause and scope of compromises.
• Investigate Microsoft 365 security incidents and contain threats with actionable guidance to customers.
• Perform basic malware analysis to support investigations.
• Develop and improve incident detection and countermeasure processes.
• Deliver clear communications to customers during incident response.
• Produce high-quality written and verbal findings.

Skills

Incident Handling

Threat Landscape Awareness

Computer Forensic Analysis

Malware Analysis

Operating System Fundamentals

Systems Administration

Network Analysis Fundamentals

Identity Platform Awareness

Email Security Awareness

Third-Party Log Analysis

Incident Remediation

Programming/Scripting

AI Fundamentals

Education

BA/BS or MA/MS in CS/CE/Math/Info Security or related field

Tools

Python

PowerShell

Bash

Job description

CrowdStrike, Inc. is hiring an Analyst, Endpoint Protection Team Candidate to join our security operations center. You will triage, investigate, and respond to detections across endpoints, identity, and cloud environments, providing remediation guidance and customer-facing communications.

The role requires strong incident handling, malware analysis, and scripting skills, with a BA/BS or higher in a related field. A 4x10 schedule is expected, and candidates in the U.S. are preferred.