Regional Principal Analyst, Falcon Complete

Posted 2hrs ago

Employment Information

Industry
Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Regional Principal Analyst providing senior technical leadership for CrowdStrike’s Falcon Complete cybersecurity operations. Improving incident response, detection quality, remediation, and AI-driven automation across U.S. regional teams.

Responsibilities:

  • Serve as principal technical advisor to Regional Directors and Senior Leadership on Falcon Complete service delivery
  • Ensure technical consistency, quality standards, and best practices across regional operations
  • Lead regional technical initiatives and coordinate with other Regional Principals
  • Support Fireteam Principal Analysts on complex or ambiguous cases with second opinions, analysis, and technical guidance
  • Perform independent technical analysis to validate or extend fireteam findings
  • Conduct technical QA reviews of closed cases across fireteams and document findings
  • Identify detection gaps, false-positive patterns, coverage opportunities, tooling improvements, telemetry improvements, and workflow improvements
  • Identify regional trends in detection patterns, threat landscape, and case quality
  • Identify analyst skill gaps and development opportunities
  • Drive consistent operational standards and agentic toolset adoption
  • Represent the regional technical perspective in cross-functional initiatives
  • Work with Product and Engineering on detection gaps, platform bugs, and feature requests
  • Coordinate with OverWatch and Intelligence on regional threat trends
  • Partner with Regional Principal Analysts on technical review standards and case QA criteria
  • Partner with Watchtower on detection tuning and coverage improvements
  • Demonstrate industry thought leadership through blog posts, CrowdCasts, conference presentations, and speaking events
  • Provide technical expertise on regional projects aligned with Falcon Complete and corporate goals
  • Drive innovation in detection gaps, triage, remediation, and automation
  • Collaborate with Section 3 AI Automation Team on regional automation opportunities
  • Identify and implement efficiency improvements with measurable regional impact
  • Work with minimal direction and a high degree of autonomy while remaining hands-on
  • Provide consultative guidance to Regional Directors and Senior Leadership

Requirements:

  • Extensive experience in multiple listed technical areas
  • Expert-level experience leading and managing complex incident response investigations, including high-severity, multi-host, and multi-customer incidents from triage through remediation
  • Proven experience investigating host/user compromises, organized crime groups, and sophisticated nation-state adversaries
  • Deep expertise in attack vectors, threat actor TTPs, and advanced proficiency applying and extending MITRE ATT&CK
  • Advanced forensic analysis across host, memory, and network artifacts
  • Advanced static and dynamic malware analysis, including reverse engineering concepts and behavioral analysis
  • Expert-level knowledge of Windows, Mac, and/or Linux operating systems, with depth in at least one
  • Advanced experience administering and securing enterprise network environments
  • Expert-level knowledge of network protocols and traffic analysis
  • Deep expertise with Okta, Microsoft Entra ID, and Active Directory, including identity-based attack techniques
  • Advanced experience investigating and remediating Microsoft 365 security incidents, including BEC and AITM attack chains
  • Advanced proficiency querying and correlating logs across cloud platforms, network devices, identity providers, and email platforms within a SIEM environment
  • Proven expertise developing and executing remediation plans for compromised environments
  • Expert-level understanding of secure network architecture and advanced hands-on enterprise network troubleshooting
  • Experience developing scripts and automation using Python, PowerShell, or Bash
  • Experience with AI models, platforms, MCP servers, and agentic frameworks
  • Experience applying AI across security operations, prompt engineering, workflow automation, and AI adoption
  • Proven experience utilizing AI technologies to enhance decision-making, streamline workflows, improve efficiency, and drive business outcomes
  • BA or BS / MA or MS degree in a listed technical field or related field; applicants without a degree but with relevant work experience and/or training will be considered
  • May be required to periodically undergo and pass alcohol and/or drug tests during employment
  • Must be eligible to work in the United States, as this is a U.S. candidate pay range

Benefits:

  • Market leader in compensation and equity awards
  • Comprehensive physical and mental wellness programs
  • Competitive vacation and holidays for recharge
  • Paid parental and adoption leaves
  • Professional development opportunities for all employees regardless of level or role
  • Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
  • Vibrant office culture with world class amenities
  • Bonuses
  • Equity grants
  • Health insurance
  • 401k
  • Paid time off