Threat Analyst, ML Ops & Detection Efficacy (Remote)

CrowdStrike Holdings, Inc.; Northern (KY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Market-leading compensation

Equity awards

Wellness programs

Generous vacation & holidays

Parental & adoption leaves

Professional development

Employee networks

Vibrant office culture

Job summary

CrowdStrike is seeking a Threat Analyst on the Data Science ML Operations and Response Team to investigate detections and malware, and to improve detection efficacy for our customers.

You will work with Technical Account Managers, Falcon Complete, Data Scientists and the Malware Research Center to analyze tickets, refine models, and reduce false positives, while contributing to proactive threat intel.

Qualifications

• Experience analyzing malware and detections to improve accuracy.
• Ability to reverse engineer malware and understand behavior.
• Proficient in Python scripting and data analysis.
• Knowledge of binary file attributes, imports/exports, and packers.
• Understanding threat/risk management and OS internals.

Responsibilities

• Analyze detection data and customer reports to improve model performance.
• Reduce false positives and manage detections across systems.
• Examine binary files to assess legitimacy and risk.
• Review product detections to ensure alignment with standards.
• Respond to internal inquiries about customer threat detections.

Skills

Malware analysis

Reverse engineering

Python

Binary file concepts

Threat/risk management

OS familiarity

Problem solving

AI in security

Job description

CrowdStrike is seeking a Threat Analyst on the Data Science ML Operations and Response Team to investigate detections and malware, and to improve detection efficacy for our customers.

You will work with Technical Account Managers, Falcon Complete, Data Scientists and the Malware Research Center to analyze tickets, refine models, and reduce false positives, while contributing to proactive threat intel.