Senior Cyber Incident Lead - Falcon Complete (Remote)

CrowdStrike Inc.; Augusta (ME); Remote; USD 125,000 - 180,000; Full time

Benefits offered by this job

Health insurance

401k plan

Paid time off

Job summary

CrowdStrike is seeking a highly skilled Senior Analyst for the Endpoint Protection Team. You will lead complex investigations across endpoint, identity, email, network, and cloud environments, acting as technical lead for high-severity incidents and coordinating with customers to contain and remediate threats.

The role emphasizes MITRE ATT&CK-based detection, malware and forensic analysis, and collaboration with customers.

Qualifications

• Extensive incident response leadership experience.
• Deep MITRE ATT&CK knowledge with detection improvements.
• Strong computer forensics across host/memory/network artifacts.
• Advanced malware analysis skills (static/dynamic).
• Expertise in Windows/Mac/Linux fundamentals.
• Strong network security and architecture understanding.
• Experience with identity/platforms like Okta/MEntra/AD.
• Experience securing Microsoft 365 and BEC/AITM scenarios.
• Advanced log analysis across cloud and on‑prem environments.

Responsibilities

• Lead high-severity investigations across multiple domains (endpoint, identity, email, network, cloud).
• Analyze telemetry and artifacts to determine root cause and attack techniques.
• Guide customers on remediation and containment during complex incidents.
• Mentor junior analysts and contribute to training materials.
• Develop SOPs and automation to improve detection and response.
• Represent CrowdStrike in thought leadership and customer engagements.

Skills

Incident handling

Threat landscape

Forensic analysis

Malware analysis

Operating systems

Network analysis

Identity platforms

Email security

Log analysis

Automation scripting

AI platforms

Education

BA/BS in CS/CE/Math/InfoSec

MA/MS in related field

Tools

Python

PowerShell

Bash

Job description

CrowdStrike is seeking a highly skilled Senior Analyst for the Endpoint Protection Team. You will lead complex investigations across endpoint, identity, email, network, and cloud environments, acting as technical lead for high-severity incidents and coordinating with customers to contain and remediate threats.

The role emphasizes MITRE ATT&CK-based detection, malware and forensic analysis, and collaboration with customers.