Senior Cybersecurity Incident Response Lead — Equity

CrowdStrike Inc.; Oregon; Hybrid; USD 125,000 - 180,000; Full time

Benefits offered by this job

Market-leading compensation

Comprehensive wellness programs

Generous vacation and holidays

Parental and adoption leave

Professional development opportunities

Diversity networks and volunteering

Vibrant office culture

Job summary

CrowdStrike is seeking a highly motivated senior analyst to join our global security operations. You will lead complex investigations across endpoint, identity, email, network, and cloud environments, serving as the technical lead for high-severity incidents and guiding remediation efforts in real time.

You will mentor junior team members, develop strategic and surgical remediation plans, and contribute to training materials and playbooks while expanding detection capabilities through automation

Qualifications

• Experience leading complex incident response investigations from triage to remediation.
• Proven ability to own high-severity, multi-host incidents across organizations.
• Deep knowledge of attack vectors, TTPs, and MITRE ATT&CK mapping for detection improvements.
• Experience in host, memory, and network forensic analysis.
• Expertise in static and dynamic malware analysis and behavior profiling.
• Strong OS fundamentals across Windows, Mac, Linux.
• Advanced network and security architecture understanding for investigations.
• Scripting/automation to build tooling and streamline workflows.
• Experience applying AI tools to security operations.

Responsibilities

• Lead complex investigations across endpoint, identity, email, network, and cloud environments as technical lead for high-severity incidents.
• Analyze EDR telemetry, forensic artifacts, and network data to determine root cause and scope.
• Investigate Microsoft 365 security incidents including BEC and AITM, advising customers at expert level.
• Review malware analysis to inform detection and remediation strategies.
• Develop and drive remediation plans coordinating third-party containment actions.
• Mentor and develop Analyst team members; contribute to training materials.
• Identify process improvements; contribute to SOPs and automation to enhance detection/response.
• Engage in thought leadership through blogs, CrowdCasts and external talks.
• Deliver expert customer communications and manage escalations during critical incidents.

Skills

Incident Handling

MITRE ATT&CK usage

Forensic Analysis

Malware Analysis

Operating System Knowledge

Systems Administration

Network Analysis

Identity Platform Awareness

Email Security

Log Analysis

Incident Remediation

Network Operations

Programming/Scripting

AI Platforms

Education

BA/BS or MA/MS in Computer Science/Engineering/Math/Info Sec

Tools

Python

PowerShell

Bash

Job description

CrowdStrike is seeking a highly motivated senior analyst to join our global security operations. You will lead complex investigations across endpoint, identity, email, network, and cloud environments, serving as the technical lead for high-severity incidents and guiding remediation efforts in real time.

You will mentor junior team members, develop strategic and surgical remediation plans, and contribute to training materials and playbooks while expanding detection capabilities through automation