Remote Cybersecurity Analyst, Endpoint Protection

CrowdStrike Inc.; Lincoln (NE); Remote; USD 85,000 - 120,000; Full time

Benefits offered by this job

Market-leading compensation

Wellness programs

Generous vacation and holidays

Parental and adoption leaves

Professional development opportunities

Employee networks and volunteering

Vibrant office culture

Job summary

CrowdStrike is seeking highly motivated analysts to protect organizations against advanced attackers from a remote-capable Security Operations Center. You will triage and respond to security alerts across endpoints, identity, email, and cloud while communicating findings clearly to customers and internal teams.

The role emphasizes incident handling, AI-enhanced workflows, and ongoing process improvement. Candidates may work in PST or MST time zones with a hybrid on-site requirement.

Qualifications

• BA or BS in Computer Science, Information Security, or related field.
• Foundational knowledge in incident response processes and targeted threats.
• Familiarity with MITRE ATT&CK framework and common attack vectors.
• Understanding of Windows, Mac, Linux operating systems.
• Experience or coursework in scripting languages like Python/PowerShell/Bash.

Responsibilities

• Triages, investigates, and responds to security alerts across endpoints, identity, email, and cloud.
• Delivers clear, concise communications to customers and internal teams.
• Investigates Microsoft 365 activity and threats, containing and guiding remediation.
• Develops and improves incident detection and countermeasure processes.

Skills

Incident handling

Threat landscape awareness

OS fundamentals

Systems administration

Network analysis

Identity platform awareness

Email security awareness

Log analysis

Scripting (Python/PowerShell/Bash)

AI fundamentals

Communication skills

Education

BA/BS in CS or related field

Tools

Okta

Microsoft Entra ID

Active Directory

Job description

CrowdStrike is seeking highly motivated analysts to protect organizations against advanced attackers from a remote-capable Security Operations Center. You will triage and respond to security alerts across endpoints, identity, email, and cloud while communicating findings clearly to customers and internal teams.

The role emphasizes incident handling, AI-enhanced workflows, and ongoing process improvement. Candidates may work in PST or MST time zones with a hybrid on-site requirement.