Remote SOC Analyst I: Incident Response & AI Tools

CrowdStrike Inc.; Saint Paul (MN); À distance; USD 85 000 - 120 000; Plein temps

Avantages offerts par ce poste

Equity awards

Wellness programs

Vacation & holidays

Parental leave

Professional development

Employee networks

Office culture

Great Place to Work

Résumé du poste

CrowdStrike is seeking a highly motivated security analyst to join the virtual security operations center. You will triage, investigate, and respond to security detections across endpoint, identity, email, network, and cloud environments.

You will conduct tactical analysis of telemetry, determine root cause, and deliver remediation guidance. Strong incident handling, forensics, and malware analysis skills are required, with AI/automation awareness a plus.

Qualifications

• Hands-on incident handling across hosts and customer environments.
• Knowledge of MITRE ATT&CK and threat frameworks.
• Forensic analysis tools in incident investigations.
• Basic malware analysis to support triage.
• Windows/macOS/Linux fundamentals and admin skills.
• Scripting in Python/PowerShell/Bash to support workflows.

Responsabilités

• Triage, investigate, and respond to security detections across endpoints and clouds.
• Analyze telemetry and artifacts to determine root cause and remediation.
• Investigate Microsoft 365 activity and contain threats.
• Perform basic malware analysis to support investigations.
• Improve incident detection and countermeasure processes.
• Deliver clear customer communications during incidents.
• Provide high-quality findings to customers and internal teams.

Connaissances

Incident Handling

Threat Landscape Awareness

Computer Forensic Analysis

Malware Analysis

OS Fundamentals

Systems Administration

Network Analysis

Identity Platform Awareness

Email Security

Third‑Party Log Analysis

Incident Remediation

Network Operations/Engineering

Programming/Scripting

AI Fundamentals

Formation

BA/BS or MA/MS in CS/InfoSec/Related

Description du poste

CrowdStrike is seeking a highly motivated security analyst to join the virtual security operations center. You will triage, investigate, and respond to security detections across endpoint, identity, email, network, and cloud environments.

You will conduct tactical analysis of telemetry, determine root cause, and deliver remediation guidance. Strong incident handling, forensics, and malware analysis skills are required, with AI/automation awareness a plus.