Senior Incident Response Lead – Endpoint Protection (Remote)

CrowdStrike Inc.; Austin (TX); A distancia; USD 125.000 - 180.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Compensation & equity

Wellness programs

Vacation & holidays

Parental leaves

Professional development

Employee networks

Office culture

Great Place to Work

Descripción de la vacante

CrowdStrike is seeking a Senior Analyst for the Endpoint Protection Team to lead and coordinate high-severity investigations across endpoints, identity, email, networks, and cloud services. You will analyze telemetry, artifacts, and attacker TTPs to determine root cause and scale, while guiding customers through remediation and containment efforts.

You will mentor teammates, contribute to training content, and advance automation and AI-assisted security workflows across CrowdStrike's global SOC

Formación

• Lead complex incident response investigations from triage to remediation.
• Apply MITRE ATT&CK to drive detection and investigation strategies.
• Perform forensic analysis across host, memory and network artifacts.
• Investigate Microsoft 365 security incidents including BEC and AITM.

Responsabilidades

• Lead complex investigations across endpoint, identity, email, network, and cloud environments for high-severity incidents.
• Conduct advanced analysis of telemetry and artifacts to determine root cause and scope.
• Provide expert guidance to customers during sophisticated attacks and incidents.
• Develop remediation plans coordinating across customer infrastructure and third parties.

Conocimientos

Incident Handling

Threat Landscape Awareness

Computer Forensic Analysis

Malware Analysis

Operating System Fundamentals

Systems Administration

Network Analysis Fundamentals

Identity Platform Awareness

Email Security Awareness

Third-Party Log Analysis

Incident Remediation

Programming/Scripting

AI Platforms

Educación

BA/BS in Computer Science or related field

Herramientas

Python

PowerShell

Bash

Descripción del empleo

CrowdStrike is seeking a Senior Analyst for the Endpoint Protection Team to lead and coordinate high-severity investigations across endpoints, identity, email, networks, and cloud services. You will analyze telemetry, artifacts, and attacker TTPs to determine root cause and scale, while guiding customers through remediation and containment efforts.

You will mentor teammates, contribute to training content, and advance automation and AI-assisted security workflows across CrowdStrike's global SOC