Senior Analyst, Falcon Complete (Cybersecurity)

Location: USA - Remote; must work a 4x10 schedule including one weekend day.

Base salary: $125,000–$180,000 per year for U.S. candidates, plus potential bonuses and equity.

Company

CrowdStrike is a cybersecurity company providing an AI-native platform for protecting organizations and processing large-scale security telemetry.

What you will do

• Lead complex, high-severity, multi-host, and multi-customer investigations across endpoint, identity, email, network, and cloud environments.
• Analyze EDR telemetry, forensic artifacts, network data, malware, Microsoft 365 incidents, BEC, and AITM attacks to determine root cause, attacker TTPs, and compromise scope.
• Develop and coordinate strategic and surgical remediation plans, including third-party containment actions across customer infrastructure.
• Mentor analysts and contribute to training materials, knowledge bases, SOPs, and team capability development.
• Build automation and improve processes to enhance detection and response capabilities.
• Manage customer escalations, provide expert guidance, and represent CrowdStrike through thought leadership, blog posts, CrowdCasts, and external speaking.

Requirements

• Expert-level experience independently leading complex incident response investigations, including high-severity, multi-host, and multi-customer incidents from triage through remediation.
• Experience investigating host and user compromises, organized crime groups, and sophisticated nation-state adversaries.
• Deep expertise in threat actor tactics, techniques, and procedures, including advanced use and extension of MITRE ATT&CK.
• Advanced forensic analysis across host, memory, and network artifacts; advanced static and dynamic malware analysis, including reverse engineering concepts and behavioral analysis.
• Expert knowledge of Windows, Mac, and/or Linux, with particular depth in at least one operating system.
• Advanced experience administering and securing enterprise networks, with knowledge of IT architecture, authentication systems, network protocols, attack paths, lateral movement, and exfiltration.
• Deep expertise with Okta, Microsoft Entra ID, and Active Directory, including identity-based attacks and credential abuse.
• Advanced experience investigating and remediating Microsoft 365 security incidents, including BEC and AITM attack chains.
• Advanced proficiency querying and correlating cloud, network, identity, and email logs in SIEM environments; experience developing remediation plans and coordinating third-party containment.
• Experience with Python, PowerShell, or Bash for investigative tooling, remediation automation, and detection and response capabilities.
• Experience with AI models, platforms, MCP servers, agentic frameworks, prompt engineering, workflow automation, and AI adoption in security operations.
• Ability to lead investigations as a subject matter expert, mentor peers and junior team members, contribute thought leadership, manage projects, complete process improvements, and foster a positive work environment.
• Must be willing to work a 4x10 schedule, including a weekend day.
• BA or BS, or MA or MS, in Computer Science, Computer Engineering, Math, Information Security, Information Assurance, Information Security Management, Intelligence Studies, Cybersecurity, Cybersecurity Policy, or a related field. Relevant experience and/or training may be considered instead of a degree.

Culture & Benefits

• Remote work with flexibility and autonomy, alongside expectations for responsible AI adoption, experimentation, and innovation.
• Health insurance, 401(k), paid time off, competitive vacation and holidays, and paid parental and adoption leave.
• Physical and mental wellness programs and professional development opportunities.
• Employee networks, geographic neighborhood groups, volunteer opportunities, and a global workplace culture.
• The role may require periodic alcohol and/or drug testing during employment.