Threat Hunter – FedCloud (Remote Night Shift)

CrowdStrike Holdings, Inc.; Northern (KY); Hybrid; USD 85,000 - 120,000; Full time

Benefits offered by this job

Market-leading compensation

Comprehensive wellness programs

Generous vacation and holidays

Parental and adoption leave

Job summary

CrowdStrike is seeking a Threat Hunter to join the OverWatch FedCloud team. You will analyze threat actor activity, identify intrusions, create detections, and track campaigns across our government cloud infrastructure. This 100% remote US-based role requires night shifts and collaboration with stakeholders.

Responsibilities include advanced threat hunting, detection development, and threat intelligence contributions. Strong Bash? No, emphasis on Python/Go and MITRE ATT&CK familiarity.

Qualifications

• Bachelor's degree or related work experience.
• Proficient English (spoken and written).
• Experience in network/host intrusion analysis, forensics, or malware analysis.
• Strong knowledge of Windows, MacOS, Linux.
• Experience with cyber threat intelligence and open-source intelligence.
• Scripting knowledge in Python or Go.
• Familiarity with MITRE ATT&CK framework.
• Ability to explain technical concepts to varied audiences.
• Willingness to undergo government background checks.

Responsibilities

• Conduct advanced threat hunting across client environments.
• Analyze and respond to sophisticated threat actor activity.
• Develop and implement new detection methodologies.
• Communicate findings to technical and executive stakeholders.
• Contribute to threat intelligence and detection engineering initiatives.

Skills

Threat hunting

Threat actor analysis

Python

Go

MITRE ATT&CK

AI utilization

Communication

Education

Bachelor's degree in relevant field

Tools

Splunk

Kibana

LogScale

NGSIEM

Job description

CrowdStrike is seeking a Threat Hunter to join the OverWatch FedCloud team. You will analyze threat actor activity, identify intrusions, create detections, and track campaigns across our government cloud infrastructure. This 100% remote US-based role requires night shifts and collaboration with stakeholders.

Responsibilities include advanced threat hunting, detection development, and threat intelligence contributions. Strong Bash? No, emphasis on Python/Go and MITRE ATT&CK familiarity.