CrowdStrike предлагает сильный старт в сфере реагирования на инциденты для госсектора, но для уровня Analyst I заявлен широкий набор задач с требованиями intermediate и advanced, что может сделать работу непростой.
Широкий охват
Госсектор и облако
Сильный бренд
?Проверки и тесты
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Analyst I (Falcon Complete GovCloud) (Cybersecurity): Detecting and responding to incidents for U.S. government and public sector customers in a FedRAMP-authorized GovCloud environment with an accent on alert triage, threat detection, digital forensics, incident response, and malware analysis. Focus on managing complex investigations, developing detection rules, analyzing malicious code, and coordinating containment and remediation across concurrent incidents.
Location: USA - Remote; candidates must be in St. Louis, MO for the hybrid role
Base salary: $85,000–$120,000 per year, plus eligibility for bonuses and equity grants.
Company
CrowdStrike is a cybersecurity company providing an AI-native platform that protects organizations and government customers from advanced attacks.
What you will do
Perform alert triage, security monitoring, threat detection, and investigations within the FedRAMP-authorized Falcon Complete GovCloud environment.
Conduct digital forensics, incident response management, evidence collection, containment, remediation planning, and malware analysis.
Configure and operate the CrowdStrike Falcon Sensor and platform, create detection rules, generate reports, and use threat graphs.
Troubleshoot complex issues and administer Linux and Windows environments, including Active Directory, shell scripting, automation, and security hardening.
Communicate technical findings, recommendations, and high-stakes incident information to government customers and internal stakeholders.
Manage concurrent incident response assignments and contribute to public-facing thought leadership through blog posts and CrowdCasts.
Requirements
Intermediate-level experience in one or more of incident handling, computer forensics, systems administration, security monitoring and detection, network forensics, malware analysis, incident remediation, or secure network operations.
Experience investigating targeted threats, including APTs, organized crime, and hacktivists; government, Department of War, intelligence community, or public sector experience is preferred within this area.
Knowledge of Windows, Mac, and Linux system internals, scripting-based automation, troubleshooting, and security hardening.
Knowledge of network protocols, network analysis tools, and network logs for incident scoping and attribution.
Programming or scripting experience in one or more of C, C#, VB, Python, Perl, Ruby on Rails, or .NET.
Experience using AI technologies to improve decision-making, workflows, efficiency, and business outcomes.
Advanced analytical thinking, communication, presentation, and problem-solving capabilities.
Intermediate time-management skills, strong organization, ability to manage concurrent incident response workstreams, and ability to maintain a professional attitude under pressure.
Commitment to continuous development in federal cybersecurity and ability to foster a positive, collaborative work environment.
A bachelor's or master's degree in a relevant field is preferred; relevant work experience, military service, industry training, or certifications may be considered instead.
Periodic alcohol and/or drug testing and additional background and fingerprint checks are required.
Culture & Benefits
Full-time role with a hybrid arrangement in St. Louis and remote work listed for the USA.
Health insurance, 401k, paid time off, competitive vacation and holidays, and paid parental and adoption leave.
Professional development opportunities, employee networks, geographic groups, and volunteer opportunities.
Physical and mental wellness programs and office amenities.
Equal opportunity workplace with support for veterans and individuals with disabilities.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →