Remote Senior Analyst — Elite Incident Response Lead

CrowdStrike Inc.; Richmond (VA); Remote; USD 125,000 - 180,000; Full time

Benefits offered by this job

Market-leading compensation

Equity awards

Comprehensive wellness programs

Generous vacation and holidays

Parental/adoption leaves

Professional development

Employee Networks

Vibrant office culture

Job summary

CrowdStrike is seeking a Senior Analyst to lead high‑severity investigations across endpoint, identity, email, and cloud environments. You will analyze EDR telemetry, conduct advanced malware forensics, and guide remediation for complex incidents at scale.

You will mentor analysts, drive process improvements, and contribute to thought leadership while collaborating with customers and partners on detection strategies and security operations modernization. Remote-friendly with demanding missions.

Qualifications

• Extensive incident response leadership experience including high-severity, multi-host incidents.
• Deep expertise in attack vectors, TTPs and applying MITRE ATT&CK to drive detection and investigation strategies.
• Advanced forensic analysis across host, memory and network artifacts.
• Advanced malware analysis including static/dynamic techniques and remediation guidance.
• Expert knowledge of Windows, macOS and Linux OS fundamentals and secure IT architecture.
• Strong experience in enterprise network security, authentication systems and common attack paths.
• Proficiency in log analysis across cloud and on-premise environments to build detection logic.
• Experience with identity and access management platforms (e.g., Okta, Entra ID, Active Directory).
• Experience investigating and remediating Microsoft 365 security incidents (BEC/AITM).
• Automation scripting in Python/PowerShell/Bash to augment investigations.

Responsibilities

• Lead complex investigations across endpoints, identity, email, network, and cloud environments as technical lead for critical incidents.
• Analyze EDR telemetry, forensics, and network data to determine root cause and scope of compromise.
• Investigate Microsoft 365 security incidents and provide expert guidance to customers.
• Review malware analysis to identify indicators of compromise and inform remediation strategies.
• Develop strategic remediation plans and coordinate containment actions with third parties.
• Mentor analysts and contribute to training materials and knowledge bases.
• Identify process improvements and contribute to SOP development; build automation for detection and response.
• Represent CrowdStrike in thought leadership activities and external speaking engagements.
• Deliver expert customer communications and manage technical escalations.

Skills

Incident Handling

Threat Landscape

Forensic Analysis

Malware Analysis

OS Fundamentals

Systems Administration

Network Analysis

Identity Platform Awareness

Email Security

AI Platforms

Programming/Scripting

Education

BA/BS in CS or related field

Tools

MITRE ATT&CK

Okta Entra ID Active Directory

Job description

CrowdStrike is seeking a Senior Analyst to lead high‑severity investigations across endpoint, identity, email, and cloud environments. You will analyze EDR telemetry, conduct advanced malware forensics, and guide remediation for complex incidents at scale.

You will mentor analysts, drive process improvements, and contribute to thought leadership while collaborating with customers and partners on detection strategies and security operations modernization. Remote-friendly with demanding missions.