Remote Threat Hunter: FedCloud & Gov Cloud

CrowdStrike Inc.; Austin (TX); Remote; USD 85,000 - 120,000; Full time

Benefits offered by this job

Market compensation

Wellness programs

Generous vacation

Parental leaves

Professional development

Employee networks

Office culture

Great Place to Work

Job summary

CrowdStrike, Inc. is seeking a Threat Hunter for the OverWatch FedCloud team. This 100% remote role in the United States involves analyzing threat actor activity, creating detections, and tracking campaigns across government cloud infrastructure. Expect both proactive and active hunting to strengthen the Falcon platform.

Shift: Tue–Fri 23:00–09:00 ET. You will communicate findings to stakeholders and advance detection engineering, threat intel, and security research initiatives.

Qualifications

• Bachelor's degree or related work experience.
• Strong English (written and verbal).
• Experience in network/host intrusion analysis, forensics, or malware analysis.
• Proficiency with Windows, MacOS, Linux.
• Experience with cyber threat intel and open-source intel analysis.
• Programming/scripting knowledge (Python or Go).
• Familiarity with MITRE ATT&CK and adversary techniques.
• Experience applying AI to security workflows.

Responsibilities

• Conduct advanced threat hunting across client environments.
• Analyze and respond to threat actor activities.
• Develop and implement new detection methodologies.
• Communicate findings to technical and executive stakeholders.
• Contribute to threat intel and detection engineering initiatives.

Skills

Bachelors degree

English proficiency

Threat hunting

OS proficiency

Scripting: Python/Go

MITRE ATT&CK

AI in security

Education

Bachelor's degree in relevant field

Tools

Splunk

LogScale

NGSIEM

Kibana

Cloud security tools

Job description

CrowdStrike, Inc. is seeking a Threat Hunter for the OverWatch FedCloud team. This 100% remote role in the United States involves analyzing threat actor activity, creating detections, and tracking campaigns across government cloud infrastructure. Expect both proactive and active hunting to strengthen the Falcon platform.

Shift: Tue–Fri 23:00–09:00 ET. You will communicate findings to stakeholders and advance detection engineering, threat intel, and security research initiatives.