Senior Incident Responder — Remote, AI-Driven Security

CrowdStrike Inc.; Lincoln (NE); Remote; USD 125,000 - 180,000; Full time

Benefits offered by this job

Equity awards

Wellness programs

Vacation & holidays

Parental leave

Professional development

Employee networks

Office culture

Job summary

CrowdStrike, Inc. is seeking a highly skilled Senior Analyst for the Endpoint Protection Team to lead complex investigations across endpoints, identities, and cloud environments.

You will analyze telemetry, forensics, and network data to determine attacker TTPs and scope of compromise, including sophisticated Microsoft 365 attacks. You will mentor teammates and drive automation, with a focus on AI-enabled security operations.

Qualifications

• Lead and manage complex incident response investigations.
• Apply MITRE ATT&CK to drive detection improvements.
• Perform malware static and dynamic analysis.
• Develop strategic and surgical remediation plans for compromised environments.
• Mentor Analyst team members and contribute to training materials.
• Build automation to enhance detection and response capabilities.
• Contribute to AI-driven security operations and prompt engineering.
• Communicate effectively during escalations.

Responsibilities

• Lead complex investigations across endpoint, identity, email, network, and cloud environments.
• Conduct advanced analysis of telemetry, artifacts, and network data to determine root cause and scope.
• Investigate Microsoft 365 attacks including BEC and AITM; provide expert guidance.
• Review malware analysis to inform detection and remediation strategies.
• Lead remediation plans and coordinate third-party containment actions.
• Mentor and develop Analyst team members; contribute to knowledge base.
• Identify process improvements; build automation for detection and response.
• Represent CrowdStrike in thought leadership activities and external speaking.
• Deliver expert customer communications during critical incidents.

Skills

Incident Handling

MITRE ATT&CK

Forensic Analysis

Malware Analysis

OS Fundamentals

Systems Administration

Network Analysis

Identity Platforms

Email Security

Log Analysis

Remediation Planning

Automation/Scripting

AI Platforms

Education

BA/BS or MS in CS-related field

Tools

Okta

Entra ID

Active Directory

Microsoft 365

Job description

CrowdStrike, Inc. is seeking a highly skilled Senior Analyst for the Endpoint Protection Team to lead complex investigations across endpoints, identities, and cloud environments.

You will analyze telemetry, forensics, and network data to determine attacker TTPs and scope of compromise, including sophisticated Microsoft 365 attacks. You will mentor teammates and drive automation, with a focus on AI-enabled security operations.