Remote Threat Hunter – FedCloud (Night Shift)

CrowdStrike Inc.; Salt Lake City (UT); A distancia; USD 85.000 - 120.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

401k

Paid time off

Descripción de la vacante

CrowdStrike Inc. is hiring a Threat Hunter for the OverWatch FedCloud team. The role involves analyzing threat actor activity, identifying intrusions, creating detections, and tracking campaigns across government cloud infrastructure.

Shift: Tue–Fri, 23:00–09:00 ET. 100% remote in the United States. Candidates should have deep experience in intrusion analysis, threat intel, and development of detection methods.

Formación

• Bachelor's degree in a relevant field or equivalent work experience.
• Strong English communication skills, written and verbal.
• Experience in network/host intrusion analysis, forensics or malware analysis.
• In-depth knowledge of Windows, MacOS and Linux.
• Experience with cyber threat intelligence and open-source intelligence.
• Programming/scripting in Python or Go.
• Familiarity with MITRE ATT&CK and adversary techniques.
• Ability to explain complex concepts to varied audiences and leverage AI tech.

Responsabilidades

• Conduct advanced threat hunting across client environments.
• Analyze and respond to sophisticated threat actor activities.
• Develop and implement new detection methodologies.
• Communicate findings to technical and executive stakeholders.
• Contribute to threat intelligence and detection engineering initiatives.

Conocimientos

Threat hunting

Network intrusion analysis

Digital forensics

Malware analysis

Operating systems

Python

Go

MITRE ATT&CK

Threat intelligence

Communication

AI in security

Educación

Bachelor's degree or related work experience

Herramientas

LogScale

Splunk

Kibana

NGSIEM

Descripción del empleo

CrowdStrike Inc. is hiring a Threat Hunter for the OverWatch FedCloud team. The role involves analyzing threat actor activity, identifying intrusions, creating detections, and tracking campaigns across government cloud infrastructure.

Shift: Tue–Fri, 23:00–09:00 ET. 100% remote in the United States. Candidates should have deep experience in intrusion analysis, threat intel, and development of detection methods.