Remote Threat Hunter - FedCloud Security (Night Shift)

CrowdStrike Holdings, Inc.; Virginia (MN); Hybrid; USD 85,000 - 120,000; Full time

Benefits offered by this job

Equity awards

Wellness programs

Paid time off

Professional development

Job summary

CrowdStrike is seeking a Threat Hunter to operate within the OverWatch FedCloud team. You will analyze threat actor activity, develop detections, and track campaigns across government cloud infrastructure while engaging in proactive and active hunts.

This role involves night shifts and remote work from the United States. You will collaborate with engineers and security teams to improve Falcon's detection capabilities, respond to intrusions, and communicate complex findings to both technical and

Qualifications

• Bachelor's degree in a relevant field or related work experience.
• Strong proficiency in English (written and verbal).
• Experience in network/host intrusion analysis, digital forensics, or malware analysis.
• Understanding of Windows, MacOS, and Linux operating systems.
• Experience with cyber threat intelligence and open-source intelligence analysis.
• Programming knowledge, particularly Python or Go.
• Familiarity with MITRE ATT&CK framework and adversary techniques.
• Ability to communicate complex technical concepts to varied audiences.
• Experience leveraging AI technologies to enhance decision-making and workflows.

Responsibilities

• Conduct advanced threat hunting operations across client environments.
• Analyze and respond to sophisticated threat actor activities.
• Develop and implement new detection methodologies.
• Communicate findings to technical and executive stakeholders.
• Contribute to threat intelligence and detection engineering initiatives.

Skills

Threat hunting

Python/Go scripting

Windows/macOS/Linux

Threat intelligence

Communication

Open-source intelligence

Education

Bachelor's degree in relevant field

Tools

LogScale

Splunk

Kibana

Cloud platforms (AWS/Azure/GCP)

Job description

CrowdStrike is seeking a Threat Hunter to operate within the OverWatch FedCloud team. You will analyze threat actor activity, develop detections, and track campaigns across government cloud infrastructure while engaging in proactive and active hunts.

This role involves night shifts and remote work from the United States. You will collaborate with engineers and security teams to improve Falcon's detection capabilities, respond to intrusions, and communicate complex findings to both technical and