Remote Security Incident Analyst - AI-Driven Defense

CrowdStrike Inc.; Topeka (KS); Remote; USD 85,000 - 120,000; Full time

Benefits offered by this job

Compensation & equity

Wellness programs

Vacation & holidays

Parental leave

Professional development

Employee networks

Office amenities

Job summary

CrowdStrike is seeking a highly motivated Analyst, Endpoint Protection, to protect global customers by triaging and responding to security detections across endpoints and cloud environments. You will investigate telemetry and Microsoft 365 activity, perform malware analysis, and craft remediation guidance for customers.

Ideal candidates will have incident response experience, familiarity with MITRE ATT&CK, and a strong foundation in OS internals and network security.

Qualifications

• BA/BS or higher in Computer Science, Computer Engineering, Math, Information Security, or related field.
• Experience in incident response across diverse security events.
• Familiarity with MITRE ATT&CK framework and threat intel.

Responsibilities

• Triage, investigate, and respond to security detections across endpoints, identity, email, network, and cloud environments.
• Analyze telemetry, logs, and artifacts to determine root cause and remediation scope.
• Investigate suspicious Microsoft 365 activity and contain threats with actionable guidance.
• Perform basic malware analysis to support investigations.
• Improve detection/response processes and countermeasures.
• Deliver clear customer communications during incident response activities.
• Produce high-quality written and verbal findings for customers and internal teams.

Skills

Incident Handling

MITRE ATT&CK

Forensic Analysis

Malware Analysis

Operating System Knowledge

Systems Administration

Network Analysis

Identity Platform Awareness

Email Security Awareness

Scripting (Python/PowerShell/Bash)

AI Fundamentals

Education

BA/BS in relevant field

Job description

CrowdStrike is seeking a highly motivated Analyst, Endpoint Protection, to protect global customers by triaging and responding to security detections across endpoints and cloud environments. You will investigate telemetry and Microsoft 365 activity, perform malware analysis, and craft remediation guidance for customers.

Ideal candidates will have incident response experience, familiarity with MITRE ATT&CK, and a strong foundation in OS internals and network security.