Remote Senior Incident Response Lead

CrowdStrike Inc.; Montpelier (VT); Remote; USD 125,000 - 180,000; Full time

Benefits offered by this job

Market-leading compensation

Comprehensive wellness programs

Professional development

Paid parental leave

Diversity and inclusion programs

Employee networks and volunteer opps

Vibrant culture and great place toWork

Job summary

CrowdStrike is a global cybersecurity leader seeking a Senior Analyst for the Endpoint Protection Team. You will lead high-severity investigations across endpoints, identity, and cloud, guiding customers with expert analysis and remediation strategies.

The role emphasizes mentoring, process improvement, and thought leadership in AI-enabled security operations. Ideal candidates have extensive incident response experience, strong MITRE ATT&CK expertise, and a background in malware analysis and

Qualifications

• Extensive incident handling leading complex investigations.
• Deep knowledge of attack vectors, MITRE ATT&CK, and detection strategies.
• Advanced forensic analysis across host, memory, and network artifacts.
• Static and dynamic malware analysis and behavioral analysis.
• Expertise in Windows, Mac, or Linux, with depth in at least one.
• Experience securing large enterprise networks and IT architecture.
• Advanced network analysis to identify patterns, lateral movement, and exfiltration.
• Identity platforms knowledge (Okta, Entra ID, Active Directory).
• Experience investigating Microsoft 365 security incidents (BEC/AITM).
• Proficient in log analysis across cloud and on-prem environments.
• Proven remediation planning for multi-host incidents.

Responsibilities

• Lead complex investigations across endpoint, identity, email, network, and cloud environments.
• Analyze telemetry, artifacts, and network data to determine root cause and scope.
• Guide customers through sophisticated Microsoft 365 security incidents.
• Review malware analysis to inform detection and remediation strategies.
• Develop strategic remediation plans and coordinate containment actions.
• Mentor analysts and contribute to training materials.
• Drive process improvements and automation for detection and response.
• Represent CrowdStrike in thought leadership and external engagements.
• Deliver expert customer communications during high-severity incidents.

Skills

Incident Handling

Threat Landscape Awareness

Computer Forensic Analysis

Malware Analysis

Operating System Fundamentals

Systems Administration

Network Analysis

Identity Platform Awareness

Email Security Awareness

Log Analysis

Incident Remediation

Programming/Scripting

AI Platforms

Education

BA or BS in Computer Science, Computer Engineering, Math, Information Security or related field

Job description

CrowdStrike is a global cybersecurity leader seeking a Senior Analyst for the Endpoint Protection Team. You will lead high-severity investigations across endpoints, identity, and cloud, guiding customers with expert analysis and remediation strategies.

The role emphasizes mentoring, process improvement, and thought leadership in AI-enabled security operations. Ideal candidates have extensive incident response experience, strong MITRE ATT&CK expertise, and a background in malware analysis and