Analyst I, Falcon Complete

Posted 1hrs ago

Employment Information

Industry
Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Cybersecurity Analyst investigating and responding to endpoint, identity, email, network, and cloud threats. Protecting CrowdStrike customers through its virtual security operations center.

Responsibilities:

  • Triage, investigate, and respond to security detections across endpoint, identity, email, network, and cloud environments
  • Analyze EDR telemetry, log sources, and forensic artifacts to determine root cause and scope of compromise
  • Develop targeted remediation recommendations
  • Investigate suspicious Microsoft 365 activity, including BEC and AITM attacks
  • Contain threats and deliver actionable guidance to customers
  • Perform basic malware analysis
  • Develop and improve incident detection and countermeasure execution processes
  • Serve as the primary customer contact during incident response activities
  • Produce clear, concise, and professional written and verbal communications, recommendations, and findings
  • Detect and respond to incidents in real time for customers through CrowdStrike’s virtual security operations center

Requirements:

  • Experience in incident handling and coordinating incident response across a broad range of security events
  • Experience investigating host/user compromises, network breaches, organized crime, and advanced persistent threats
  • Strong working knowledge of attack vectors, threat actor TTPs, and MITRE ATT&CK
  • Hands-on experience with computer forensic analysis tools
  • Ability to perform basic static and dynamic malware analysis
  • Strong understanding of Windows, Mac, and/or Linux operating systems, including Windows internals
  • Hands-on systems administration experience across enterprise environments
  • Strong knowledge of network protocols and analysis tools
  • Experience with identity and access management platforms such as Okta, Microsoft Entra ID, and Active Directory
  • Experience investigating Microsoft 365 security incidents, including BEC and AITM attacks
  • Working knowledge of enterprise log sources and SIEM investigation and triage
  • Basic understanding of incident remediation and third-party platform containment
  • Working knowledge of secure network architecture and network troubleshooting
  • Experience with Python, PowerShell, or Bash scripting
  • Experience utilizing AI technologies to enhance decision-making and workflows
  • Must be willing to work a 4x10 schedule, including a day on the weekend
  • BA or BS / MA or MS degree in a listed technical or related field; applicants without a degree but with relevant work experience and/or training will be considered
  • Must maintain legal entitlement to work in Canada
  • Subject to background checks, including criminal record, credit, and/or reference checks

Benefits:

  • Market leader in compensation and equity awards
  • Comprehensive physical and mental wellness programs
  • Competitive vacation and holidays for recharge
  • Paid parental and adoption leaves
  • Professional development opportunities for all employees regardless of level or role
  • Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
  • Vibrant office culture with world class amenities