Senior Incident Response Analyst - Endpoint Security

CrowdStrike Inc.; Carson City (NV); Remote; USD 125,000 - 180,000; Full time

Benefits offered by this job

Market-leading compensation

Wellness programs

Paid time off

Parental leave

Professional development

Employee networks

Vibrant office culture

Job summary

CrowdStrike is seeking a Senior Analyst in a remote setting to lead complex investigations across endpoint, identity, email, network, and cloud environments. You will analyze EDR telemetry, forensic artifacts, and network data to determine root cause, attacker TTPs, and full scope of compromise, including Microsoft 365 attacks.

You will mentor analysts, drive remediation plans, and contribute to automation and SOP development, while engaging customers with expert guidance during critical

Qualifications

• Extensive incident response leadership experience across complex environments.
• Proven ability to manage high-severity, multi-customer incidents from triage to remediation.
• Strong communication skills for customer-facing escalations.

Responsibilities

• Lead complex investigations across endpoint, identity, email, network, and cloud environments.
• Conduct advanced analysis of telemetry, artifacts, and network data to determine root cause and scope.
• Investigate Microsoft 365 attacks (BEC, AITM) and provide expert guidance to customers.
• Review malware analysis to inform detection and remediation strategies.
• Develop and lead remediation plans coordinating third-party containment actions.
• Mentor Analyst team members and contribute to training materials.

Skills

Incident Handling

Threat TTPs

Forensic Analysis

Malware Analysis

OS Fundamentals

Systems Administration

Network Analysis

Identity Platform

Email Security

Log Analysis

Remediation

Network Architecture

Scripting

AI Platforms

Education

BA/BS in Computer Science or related field

Tools

Job description

CrowdStrike is seeking a Senior Analyst in a remote setting to lead complex investigations across endpoint, identity, email, network, and cloud environments. You will analyze EDR telemetry, forensic artifacts, and network data to determine root cause, attacker TTPs, and full scope of compromise, including Microsoft 365 attacks.

You will mentor analysts, drive remediation plans, and contribute to automation and SOP development, while engaging customers with expert guidance during critical