Analyst I, Falcon Complete (Remote, CAN) (Cybersecurity)

Location: Remote in Canada; candidates must be available in PST or MST time zones. The role requires a 4x10 schedule, including one weekend day. The position is open only to US citizens and Green Card holders, and employees must maintain legal entitlement to work in Canada.

Base salary: CAD 90,000–135,000 per year, plus variable/incentive compensation, equity, and benefits.

Company

CrowdStrike is a cybersecurity company protecting organizations with an AI-native security platform and large-scale distributed systems.

What you will do

• Triage, investigate, and respond to detections across endpoint, identity, email, network, and cloud environments.
• Analyze EDR telemetry, logs, and forensic artifacts to determine compromise scope and root cause.
• Investigate Microsoft 365 incidents, including business email compromise and adversary-in-the-middle attacks.
• Perform basic malware analysis and develop incident detection, containment, and remediation processes.
• Provide clear recommendations, findings, and guidance to customers and internal stakeholders during incident response.

Requirements

• Hands-on incident response experience covering multiple simultaneous incidents, host and user compromises, network breaches, organized crime, and advanced persistent threats.
• Working knowledge of attack vectors, threat actor TTPs, and frameworks such as MITRE ATT&CK.
• Experience with computer forensic analysis, basic static and dynamic malware analysis, and investigation of forensic artifacts.
• Strong understanding of Windows, Mac, and/or Linux, including Windows file systems, registries, scheduled tasks, and running processes.
• Experience administering networks and troubleshooting connectivity, authentication, configuration, secure network architecture, and enterprise network environments.
• Knowledge of network protocols, network traffic analysis, identity platforms such as Okta, Microsoft Entra ID, and Active Directory, and Microsoft 365 security incidents.
• Experience analyzing cloud, network, identity, and email logs and conducting investigation and triage in a SIEM platform.
• Basic understanding of threat containment and surgical remediation, including third-party platform containment measures.
• Experience with Python, PowerShell, or Bash scripting; experience using AI technologies to improve decision-making, workflows, efficiency, and business outcomes.
• Ability to complete technical tasks independently, grow technical and soft skills, and foster a positive work environment.
• BA, BS, MA, or MS in computer science, computer engineering, mathematics, information security, information assurance, information security management, intelligence studies, cybersecurity, cybersecurity policy, or a related field; relevant experience and/or training may substitute for a degree.
• US citizenship or US Green Card status is required.
• Legal entitlement to work in Canada is required.

Culture & Benefits

• Remote work with flexibility and autonomy.
• Comprehensive physical and mental wellness programs.
• Competitive vacation and holidays, plus paid parental and adoption leave.
• Professional development opportunities for employees at all levels.
• Employee networks, geographic groups, volunteer opportunities, and office amenities.
• Employment includes variable/incentive compensation, equity, and benefits.

Hiring process

• Selected applicants are subject to background checks, including criminal record, credit, and/or reference checks.