Senior Incident Response Analyst - Remote

CrowdStrike Inc.; Atlanta (GA); Remote; USD 125,000 - 180,000; Full time

Benefits offered by this job

Compensation

Wellness programs

Paid time off

Parental leave

Professional development

Employee networks

Office culture

EEO/Inclusive

Job summary

CrowdStrike Inc. is seeking highly motivated, self-driven technical analysts to join our global security operations center.

You will lead complex investigations across endpoints, identity, email, network, and cloud environments, acting as a technical lead for high-severity incidents and guiding customers through remediation. Ideal candidates bring extensive incident response experience, strong communication skills, and a passion for mentoring others.

Qualifications

• Extensive incident response leadership experience across multi-host and multi-customer scenarios.
• Deep expertise applying MITRE ATT&CK to drive detection improvements.
• Forensic analysis across host, memory, and network artifacts.

Responsibilities

• Lead complex investigations across endpoint, identity, email, network, and cloud environments for high-severity incidents.
• Conduct advanced analysis of telemetry, artifacts, and network data to determine root cause and scope of compromise.
• Investigate Microsoft 365 attacks including BEC and AITM, providing expert guidance to customers.
• Review malware analysis to inform detection and remediation strategies.
• Develop and lead remediation plans across environments, coordinating third-party containment as needed.
• Mentor analysts and contribute to training materials and knowledge bases.
• Identify and drive process improvements and automation to boost detection/response capabilities.
• Represent CrowdStrike through thought leadership and external speaking engagements.
• Deliver expert customer communications and manage escalations during critical incidents.

Skills

Incident Handling

Threat Landscape Awareness

Computer Forensic Analysis

Malware Analysis

Operating System Fundamentals

Network Analysis

Identity Platform Awareness

Email Security Awareness

Third-Party Log Analysis

Incident Remediation

Programming/Scripting

AI Platforms

Education

BA/BS in Computer Science/Engineering/Information Security

Tools

Okta

Microsoft Entra ID

Active Directory

Python

PowerShell

Bash

Job description

CrowdStrike Inc. is seeking highly motivated, self-driven technical analysts to join our global security operations center.

You will lead complex investigations across endpoints, identity, email, network, and cloud environments, acting as a technical lead for high-severity incidents and guiding customers through remediation. Ideal candidates bring extensive incident response experience, strong communication skills, and a passion for mentoring others.