Remote Threat Hunter for FedCloud – AI-Driven Security

CrowdStrike Inc.; Denver (CO); Remote; USD 85,000 - 120,000; Full time

Benefits offered by this job

Equity awards

Wellness programs

Vacation & holidays

Parental leave

Professional development

Employee networks

Office culture

Job summary

CrowdStrike is seeking a Threat Hunter to join the OverWatch FedCloud team, analyzing threat actor activity, identifying intrusions, and building detections across government cloud infra. You will work remotely from the United States with a night shift schedule.

Responsibilities include performing advanced threat hunts, responding to sophisticated actor activity, and collaborating with stakeholders to drive improvements in Falcon platform detections and threat intelligence programs.

Qualifications

• Bachelor's degree in a relevant field or equivalent work experience.
• Strong English communication (written and verbal).
• Experience in network/host intrusion analysis, digital forensics, or malware analysis.
• Comprehensive understanding of Windows, MacOS, and Linux operating systems.
• Familiarity with MITRE ATT&CK and adversary techniques.

Responsibilities

• Conduct advanced threat hunting operations across client environments.
• Analyze and respond to sophisticated threat actor activities.
• Develop and implement new detection methodologies.
• Communicate findings to technical and executive stakeholders.
• Contribute to threat intelligence and detection engineering initiatives.

Skills

Threat hunting

Python

Go

Windows

MacOS

Linux

MITRE ATT&CK

AI in security

Communication

Intrusion analysis

Digital forensics

Malware analysis

OSINT

Education

Bachelor's degree

Tools

Splunk

NGSIEM

Kibana

LogScale

Job description

CrowdStrike is seeking a Threat Hunter to join the OverWatch FedCloud team, analyzing threat actor activity, identifying intrusions, and building detections across government cloud infra. You will work remotely from the United States with a night shift schedule.

Responsibilities include performing advanced threat hunts, responding to sophisticated actor activity, and collaborating with stakeholders to drive improvements in Falcon platform detections and threat intelligence programs.