Senior Analyst, Falcon Complete — Remote Incident Lead

CrowdStrike, Inc.; United States; Remote; USD 125,000 - 180,000; Full time

Benefits offered by this job

Market-leading compensation and equity

Comprehensive wellness programs

Paid parental/adoption leaves

Professional development opportunities

Great Place to Work Certified

Job summary

CrowdStrike, Inc. is seeking a Senior Analyst for its Endpoint Protection Team to lead complex incident investigations across diverse environments.

You will assess telemetry, artifacts, and network data to determine root causes and attacker techniques, guiding customers through remediation and containment strategies. You will mentor analysts, contribute to training materials, and help advance detection capabilities.

Qualifications

• Expert‑level experience leading and managing complex incident response investigations.
• Advanced MITRE ATT&CK knowledge applied to detection improvements.
• Forensic analysis across host, memory, and network artifacts.

Responsibilities

• Lead complex investigations across endpoint, identity, email, network, and cloud environments, serving as technical lead for high-severity incidents.
• Conduct advanced analysis of telemetry, artifacts, and network data to determine root cause and full scope of compromise.
• Investigate Microsoft 365 attacks including BEC and AITM, providing expert guidance to customers.
• Perform advanced review of malware analysis to inform detection and remediation strategies.
• Develop and lead remediation plans for compromised environments, coordinating third‑party containment.

Skills

Incident Handling

Threat Landscape Awareness

Computer Forensic Analysis

Malware Analysis

Operating System Fundamentals

Systems Administration

Network Analysis Fundamentals

Identity Platform Awareness

Email Security Awareness

Third-Party Log Analysis

Incident Remediation

Network Operations/Engineering

Programming/Scripting

AI Platforms

Education

BA or BS / MA or MS in Computer Science or related field

Tools

Python

PowerShell

Bash

Job description

CrowdStrike, Inc. is seeking a Senior Analyst for its Endpoint Protection Team to lead complex incident investigations across diverse environments.

You will assess telemetry, artifacts, and network data to determine root causes and attacker techniques, guiding customers through remediation and containment strategies. You will mentor analysts, contribute to training materials, and help advance detection capabilities.