Подходящая для начинающих роль в ведущей компании по кибербезопасности дает практический опыт реагирования на инциденты и возможности развития, но обязательная смена в выходной и широкий набор ожиданий понравятся не всем.
Работа в выходной
?Широкий профиль
Сильный бренд
Поддержка развития
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Analyst I, Falcon Complete (Cybersecurity): Detecting and responding to real-time security incidents across endpoint, identity, email, and cloud environments with an accent on EDR telemetry, Microsoft 365 threats, and customer-facing incident communications. Focus on investigating compromise, analyzing forensic artifacts and logs, containing BEC and AITM attacks, and developing incident countermeasures.
Location: USA — remote; candidates must be located in the PST or MST timezones. The schedule is 4x10, including one weekend day.
Base salary: $85,000–$120,000 per year for U.S. candidates, with eligibility for bonuses and equity grants.
Company
CrowdStrike provides an AI-native cybersecurity platform that protects organizations by detecting and stopping advanced threats across large-scale distributed systems.
What you will do
Serve as the primary first point of contact and provide clear, professional communications, findings, recommendations, and guidance to customers and internal stakeholders.
Triage, investigate, and respond to security alerts across endpoint, identity, email, and cloud environments.
Analyze EDR telemetry, third-party logs, and forensic artifacts to determine compromise scope and support remediation.
Investigate Microsoft 365 activity, including business email compromise and adversary-in-the-middle attacks; contain threats and provide actionable customer guidance.
Develop and improve incident detection processes and execute countermeasures.
Requirements
Training or foundational knowledge in incident handling, including targeted threats, malware infections, unauthorized access, incident response, and remediation.
Foundational awareness of attack vectors, threat actor tactics, techniques, and procedures, including MITRE ATT&CK.
Understanding of Windows, Mac, and Linux fundamentals, including Windows file systems, registry, scheduled tasks, and running processes.
Experience administering networks and troubleshooting connectivity and authentication issues, with understanding of IT architecture in small to large networks.
Knowledge of network protocols, network analysis tools, associated network logs, secure network architecture, and network operations.
Familiarity with identity and access management platforms such as Okta, Microsoft Entra ID, and Active Directory.
Familiarity with Microsoft 365 security, including BEC and AITM phishing patterns.
Foundational understanding of log sources from cloud platforms, network devices, identity providers, email platforms, and other enterprise technologies for NG-SIEM investigation and triage.
Experience or coursework in scripting languages such as Python, PowerShell, or Bash.
Experience or demonstrated interest in using AI technologies to improve decision-making, workflows, efficiency, and business outcomes.
Ability to complete technical tasks without supervision, strong troubleshooting skills, and a desire to develop technical and soft skills.
Ability to foster a positive work environment and attitude.
BA/BS or MA/MS in Computer Science, Computer Engineering, Mathematics, Information Security, Information Assurance, Information Security Management, Intelligence Studies, Cybersecurity, Cybersecurity Policy, or a related field; relevant work experience and/or training may be considered instead of a degree.
Must be willing to work a 4x10 schedule, including a day on the weekend.
The role may require periodically passing alcohol and/or drug tests during employment.
Culture & Benefits
Remote work within the PST or MST timezones with a 4x10 schedule.
Market-leading compensation, equity awards, health insurance, 401(k), paid time off, and competitive vacation and holidays.
Paid parental and adoption leave and physical and mental wellness programs.
Professional development opportunities, employee networks, geographic neighborhood groups, and volunteer opportunities.
Equal employment opportunity, affirmative action support for veterans and individuals with disabilities, and participation in the U.S. E-Verify program.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →