Remote Threat Hunter for Federal Cloud Security

CrowdStrike Inc.; Helena (MT); Remote; USD 85,000 - 120,000; Full time

Benefits offered by this job

Health insurance

401k

Paid time off

Job summary

CrowdStrike is seeking a Threat Hunter to join the OverWatch FedCloud team. You will analyze threat actor activity, identify intrusions, create detections, and track campaigns across our government cloud infrastructure.

The role involves both proactive and active threat hunting to enhance the Falcon platform's detection capabilities. Shifts are night hours, remote from the United States, with opportunities to contribute to threat intelligence, detection engineering, and stakeholder

Qualifications

• Bachelor's degree or related work experience.
• Strong proficiency in English (written and verbal).
• Demonstrated experience in network/host-based intrusion analysis, digital forensics, or malware analysis.
• Comprehensive understanding of Windows, MacOS, and Linux operating systems.
• Experience with cyber threat intelligence and open-source intelligence analysis.
• Programming/scripting knowledge, particularly Python or Go; understanding of admin tools and living-off-the-land techniques.
• Familiarity with MITRE ATT&CK framework and adversary techniques; ability to communicate complex concepts.
• Proven experience using AI technologies to enhance decision-making and workflows.

Responsibilities

• Conduct advanced threat hunting operations across client environments.
• Analyze and respond to sophisticated threat actor activities.
• Develop and implement new detection methodologies.
• Communicate findings to technical and executive stakeholders.
• Contribute to threat intelligence and detection engineering initiatives.

Skills

Threat hunting

Threat analysis

AI in security

English proficiency

Education

Bachelor's degree or related work experience

Tools

Python

Go

Windows

Linux

MacOS

Splunk

LogScale

Job description

CrowdStrike is seeking a Threat Hunter to join the OverWatch FedCloud team. You will analyze threat actor activity, identify intrusions, create detections, and track campaigns across our government cloud infrastructure.

The role involves both proactive and active threat hunting to enhance the Falcon platform's detection capabilities. Shifts are night hours, remote from the United States, with opportunities to contribute to threat intelligence, detection engineering, and stakeholder