Remote Threat Hunter for FedCloud Security

CrowdStrike Inc.; City of Albany (NY); Remote; USD 85,000 - 120,000; Full time

Benefits offered by this job

Health insurance

401k plan

Paid time off

Parental leave

Professional development

Job summary

CrowdStrike, a global leader in cybersecurity, is seeking a Threat Hunter for the OverWatch FedCloud team. This 100% remote US-based role analyzes threat actor activity, develops detections, and tracks campaigns across government cloud infrastructure.

Shift: Tuesday–Friday nights ET; you will perform proactive threat hunting, communicate findings to technical and executive audiences, and contribute to threat intel and detection engineering initiatives.

Qualifications

• Bachelor's degree in relevant field or related work experience
• Strong proficiency in English (written and verbal)
• Experience in intrusion analysis, forensics, or malware analysis
• OS knowledge: Windows, MacOS, Linux
• Experience with cyber threat intelligence and open-source intel
• Programming/scripting knowledge, Python or Go; Living-off-the-land concepts
• Familiarity with MITRE ATT&CK and adversary techniques
• Experience using AI to improve decision-making; background checks
• US Citizens or Green Card holders

Responsibilities

• Conduct advanced threat hunting operations across client environments
• Analyze and respond to sophisticated threat actor activities
• Develop and implement new detection methodologies
• Communicate findings to technical and executive stakeholders
• Contribute to threat intelligence and detection engineering initiatives

Skills

Threat hunting

Intrusion analysis

Digital forensics

Malware analysis

Python/Go

English proficiency

MITRE ATT&CK

AI in security

Education

Bachelor's degree

Tools

LogScale

NGSIEM

Splunk

Kibana

Job description

CrowdStrike, a global leader in cybersecurity, is seeking a Threat Hunter for the OverWatch FedCloud team. This 100% remote US-based role analyzes threat actor activity, develops detections, and tracks campaigns across government cloud infrastructure.

Shift: Tuesday–Friday nights ET; you will perform proactive threat hunting, communicate findings to technical and executive audiences, and contribute to threat intel and detection engineering initiatives.