Senior Analyst, Falcon Complete - Remote Incident Lead

CrowdStrike Holdings, Inc.; United States; Remote; USD 125,000 - 180,000; Full time

Benefits offered by this job

Wellness programs

Generous vacation & holidays

Paid parental leave

Professional development

Employee networks

Job summary

CrowdStrike Holdings, Inc. is seeking a Sr. Analyst for Falcon Complete (Remote) to lead complex investigations across endpoints, identity, email, and cloud environments. You will guide high-severity incidents, analyze EDR telemetry, and deliver expert remediation strategies for customers.

Ideal candidates have extensive incident response experience, MITRE ATT&CK expertise, and a passion for mentoring others while advancing AI-enabled SOC workflows.

Qualifications

• Ability to lead complex technical investigations independently.
• Mentor peers and junior team members; contribute to training materials.
• Experience with incident response in enterprise environments.

Responsibilities

• Lead complex investigations across endpoint, identity, email, network, and cloud environments.
• Provide expert guidance to customers during high-severity incidents.
• Develop strategic remediation plans coordinating third-party containment actions.
• Mentor Analyst team members and contribute to knowledge base content.
• Drive process improvements and automation to enhance detection and response.

Skills

Incident handling

Threat landscape awareness

Computer forensic analysis

Malware analysis

Operating system fundamentals

Systems administration

Network analysis fundamentals

Identity platform awareness

Email security awareness

Third-party log analysis

Programming/scripting

AI platforms

Education

BA/BS in Computer Science or related field

Tools

Python

PowerShell

Bash

MITRE ATT&CK

Job description

CrowdStrike Holdings, Inc. is seeking a Sr. Analyst for Falcon Complete (Remote) to lead complex investigations across endpoints, identity, email, and cloud environments. You will guide high-severity incidents, analyze EDR telemetry, and deliver expert remediation strategies for customers.

Ideal candidates have extensive incident response experience, MITRE ATT&CK expertise, and a passion for mentoring others while advancing AI-enabled SOC workflows.