Remote Security Analyst I: AI-Driven Threat Response

CrowdStrike Inc.; Montpelier (VT); Remote; USD 85,000 - 120,000; Full time

Benefits offered by this job

Market-leading pay

Wellness programs

Vacation & holidays

Parental leave

Professional development

Employee networks

Office culture

Great Place to Work

Job summary

CrowdStrike is seeking a highly motivated Analyst for the Endpoint Protection Team. You will triage, investigate, and respond to security detections across endpoints, identity, email, network, and cloud environments.

The role emphasizes real-time incident response, malware analysis, and actionable guidance to customers. Applicants should have hands-on IR experience, knowledge of MITRE ATT&CK, and strong scripting skills.

Qualifications

• Hands-on incident response across host, network, and cloud environments.
• Experience applying MITRE ATT&CK frameworks to investigations.
• Proficiency in forensic analysis tools during IR.
• Ability to perform basic malware analysis to support investigations.
• Strong knowledge of Windows, Mac, or Linux internals.

Responsibilities

• Triage, investigate, and respond to security detections across endpoints and cloud.
• Analyze telemetry and artifacts to determine root cause and scope of compromise.
• Investigate suspicious Microsoft 365 activity and contain threats.
• Perform basic malware analysis to support incident triage.
• Improve detection and response processes for efficiency and accuracy.
• Communicate clearly with customers during incident response and deliver findings.

Skills

Incident Handling

MITRE ATT&CK

Forensic Analysis

Malware Analysis

OS Fundamentals

Systems Administration

Network Analysis

Identity Management

Email Security

Log Analysis

Incident Remediation

Scripting

AI Fundamentals

Programming/Scripting

Education

BA/BS in CS, Info Sec, or related field

Job description

CrowdStrike is seeking a highly motivated Analyst for the Endpoint Protection Team. You will triage, investigate, and respond to security detections across endpoints, identity, email, network, and cloud environments.

The role emphasizes real-time incident response, malware analysis, and actionable guidance to customers. Applicants should have hands-on IR experience, knowledge of MITRE ATT&CK, and strong scripting skills.