Senior Endpoint Threat Hunter – Remote IR Lead

CrowdStrike Inc.; Hartford (CT); A distancia; USD 125.000 - 180.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Market-leading compensation

Comprehensive wellness programs

Generous vacation & holidays

Parental and adoption leaves

Professional development

Employee Networks & volunteering

Vibrant office culture

Descripción de la vacante

CrowdStrike is a global leader in cybersecurity seeking a Senior Analyst for the Endpoint Protection Team. You will lead complex investigations across endpoint, identity, email, network, and cloud environments, serving as a technical lead for high-severity incidents.

You will analyze EDR telemetry, forensic artifacts, and network data to determine root cause and attacker TTPs, while mentoring team members and driving process improvements in detection and response capabilities.

Formación

• Experience leading complex incident response investigations.
• Strong understanding of MITRE ATT&CK and attack techniques.
• Ability to mentor peers and develop team capabilities.

Responsabilidades

• Lead complex investigations across endpoint, identity, email, network and cloud environments.
• Analyze telemetry, artifacts, and network data to determine root cause and scope of compromise.
• Investigate Microsoft 365 security incidents including BEC and AITM, providing expert guidance.
• Develop remediation plans and coordinate containment actions across environments.
• Mentor analysts and contribute to training materials and knowledge base.

Conocimientos

Incident Handling

Threat Landscape Awareness

Computer Forensic Analysis

Malware Analysis

Network Analysis

AI Platforms in Security

Educación

BA/BS in Computer Science or related field

Herramientas

Python

PowerShell

Bash

Descripción del empleo

CrowdStrike is a global leader in cybersecurity seeking a Senior Analyst for the Endpoint Protection Team. You will lead complex investigations across endpoint, identity, email, network, and cloud environments, serving as a technical lead for high-severity incidents.

You will analyze EDR telemetry, forensic artifacts, and network data to determine root cause and attacker TTPs, while mentoring team members and driving process improvements in detection and response capabilities.