Senior Endpoint Defense Lead — Remote Falcon Complete

CrowdStrike Inc.; Salt Lake City (UT); Remote; USD 125,000 - 180,000; Full time

Benefits offered by this job

Market-leading compensation

Equity awards

Comprehensive wellness programs

Vacation and holidays

Parental and adoption leaves

Professional development

Employee Networks and volunteer opport

Vibrant office culture

Great Place to Work Certified

Job summary

CrowdStrike is seeking a Senior Analyst to join the Endpoint Protection Team. You will lead complex investigations across endpoint, identity, email, network and cloud environments, analyzing EDR telemetry and artifacts to determine root cause and attacker techniques.

You will mentor teammates, drive remediation, and contribute to automation and threat intelligence initiatives. Candidates should have extensive incident response experience, strong knowledge of MITRE ATT&CK, and advanced malware

Qualifications

• Experience leading complex incident response investigations from triage through remediation.
• Deep knowledge of MITRE ATT&CK and how to apply it to detections and investigations.
• Forensic analysis across host, memory, and network artifacts with diverse toolkits.
• Ability to perform static and dynamic malware analysis and extract indicators of compromise.
• Strong Windows, macOS, or Linux expertise with enterprise IT knowledge.
• Experience securing enterprise networks and understanding common attack paths.
• Expertise in network protocols, traffic analysis, and detecting lateral movement.
• Identity/access management expertise (Okta, Entra ID, Active Directory).
• Advanced experience investigating Microsoft 365 security incidents (BEC/AITM).
• Proficient in parsing and correlating logs across cloud, identity, and network platforms.
• Ability to design and execute strategic remediation plans and coordinate containment.
• Mentor peers; contribute to training and knowledge bases.
• Develop automation to enhance detection and response capabilities.
• Experience with AI models and agentic SOC workflows in security operations.

Responsibilities

• Lead complex investigations across endpoint, identity, email, network, and cloud environments.
• Analyze telemetry, artifacts, and network data to determine root cause and attack scope.
• Provide expert guidance on sophisticated Microsoft 365 attacks and remediation.
• Review malware behavior to inform detection strategies and indicators of compromise.
• Develop remediation plans and coordinate third-party containment actions.
• Mentor and develop Analyst team members; contribute to training materials.
• Identify process improvements and build automation for SOC workflows.
• Represent CrowdStrike in thought leadership activities and customer communications.

Skills

Incident handling

Threat landscape awareness

Computer forensic analysis

Malware analysis

Operating system fundamentals

Systems administration

Network analysis

Identity platform awareness

Email security awareness

Log analysis across cloud/identity

Incident remediation

Network operations/architecture

Programming/scripting

AI platforms in security

Education

BA or BS in Computer Science/Engineering or related field

Job description

CrowdStrike is seeking a Senior Analyst to join the Endpoint Protection Team. You will lead complex investigations across endpoint, identity, email, network and cloud environments, analyzing EDR telemetry and artifacts to determine root cause and attacker techniques.

You will mentor teammates, drive remediation, and contribute to automation and threat intelligence initiatives. Candidates should have extensive incident response experience, strong knowledge of MITRE ATT&CK, and advanced malware