Remote Cyber Threat Analyst - Incident Response

CrowdStrike Inc.; Columbus (OH); Remote; USD 85,000 - 120,000; Full time

Job summary

CrowdStrike is seeking a highly motivated, self-driven Analyst for Endpoint Protection to join our global security operations. You will triage, investigate, and respond to detections across endpoints, identity, email, network, and cloud environments, working to containing threats in real time for our customers.

The role emphasizes incident response, malware analysis, and the use of AI-enabled workflows to accelerate investigations.

Qualifications

• BA/BS in Computer Science, Computer Engineering, Information Security or related field required.
• Experience in incident response and security investigations preferred.
• Strong communication skills and self-motivation required.

Responsibilities

• Triage, investigate, and respond to security detections across endpoint, identity, email, network, and cloud environments.
• Conduct tactical analysis of telemetry, log sources, and artifacts to determine root cause and remediation.
• Investigate Microsoft 365 activity including BEC and AITM attacks and provide actionable guidance to customers.
• Perform basic malware analysis to support investigations and triage.
• Develop and improve processes for incident detection and countermeasures.
• Deliver clear, professional customer communications as the primary contact during incident response.
• Produce high-quality written and verbal findings to customers and internally.

Skills

Incident Handling

Threat Landscape Awareness

Computer Forensic Analysis

Malware Analysis

Operating System Fundamentals

Systems Administration

Network Analysis Fundamentals

Identity Platform Awareness

Email Security Awareness

Third-Party Log Analysis

Incident Remediation

Programming/Scripting

AI Fundamentals

Education

BA/BS in Computer Science or related field

Tools

Python

PowerShell

Bash

Job description

CrowdStrike is seeking a highly motivated, self-driven Analyst for Endpoint Protection to join our global security operations. You will triage, investigate, and respond to detections across endpoints, identity, email, network, and cloud environments, working to containing threats in real time for our customers.

The role emphasizes incident response, malware analysis, and the use of AI-enabled workflows to accelerate investigations.