Remote Senior Incident Response Lead – Falcon Complete

CrowdStrike Inc.; United States; Remote; USD 125,000 - 180,000; Full time

Benefits offered by this job

Market-leading compensation

Comprehensive wellness programs

Generous vacation

Parental and adoption leaves

Professional development

Employee networks

Vibrant office culture

Job summary

CrowdStrike is seeking motivated analysts to lead high‑severity investigations across endpoints, identity, email, network and cloud environments.

You will analyze EDR telemetry, forensic artifacts, and network data to determine root cause and attacker TTPs, while mentoring junior team members and developing remediation strategies. The role emphasizes automation, collaboration, and customer-facing communications.

Qualifications

• Extensive incident response investigations leadership, including high-severity and multi-host cases.
• Deep knowledge of attack vectors, TTPs, and applying MITRE ATT&CK to detection and investigations.
• Advanced forensic analysis across host, memory, and network artifacts.

Responsibilities

• Lead complex investigations across endpoints, identity, email, network and cloud environments.
• Provide expert guidance during highly technical incidents and escalations.
• Mentor Analysts, contribute to training materials and SOPs.
• Develop and drive remediation plans and containment actions with third parties.
• Create automation to enhance detection, response, and remediation capabilities.
• Represent CrowdStrike in thought leadership activities and customer communications.

Skills

Incident Handling

MITRE ATT&CK

Forensic Analysis

Malware Analysis

Operating Systems

Systems Administration

Network Analysis

Identity Platform

Email Security

Log Analysis

Incident Remediation

Programming/Scripting

AI Platforms

Education

BA/BS in Computer Science / Information Security

MA/MS considered

Job description

CrowdStrike is seeking motivated analysts to lead high‑severity investigations across endpoints, identity, email, network and cloud environments.

You will analyze EDR telemetry, forensic artifacts, and network data to determine root cause and attacker TTPs, while mentoring junior team members and developing remediation strategies. The role emphasizes automation, collaboration, and customer-facing communications.