Analyst I Remote Job, Falcon Complete

About CrowdStrike

CrowdStrike is a global cybersecurity leader that protects the people, processes and technologies that drive modern organizations. Since 2011, the mission has stayed the same: stop breaches. The company runs an AI-native platform and works on large scale distributed systems, processing almost 3 trillion events per day. Its customers span every industry and rely on CrowdStrike to keep their businesses running and their communities safe.

CrowdStrikers are expected to contribute to responsible AI adoption, experimentation, and innovation, using an AI-first mindset to accelerate execution and solve complex problems.

About the Role

CrowdStrike is looking for self-driven, technical analysts who want to make a difference in global security by protecting organizations from the most advanced attackers. The CrowdStrike virtual security operations center offers a wide range of experiences, with analysts detecting and responding to incidents in real time for customers.

This role is open to candidates located in either the PST or MST timezone.

You may be a fit for the Associate Analyst, Endpoint Protection Team if you:

• Have a passion for cybersecurity and want to build a career protecting organizations from sophisticated threats.
• Are self-motivated and want to quickly build your skills.
• Want innovative work that matters to your customers.
• Have a foundational background in Information Technology or Information Security.
• Communicate clearly and professionally with customers and colleagues.
• Enjoy learning from smart, like-minded people every day.
• Are interested in the evolving role of AI in security operations, including AI models, prompt engineering, and agentic SOC workflows.

What You Will Do

• Serve as the primary first point of contact, delivering clear, concise, and professional customer communications.
• Produce high-quality written and verbal communications, recommendations, and findings for customers and internal teams.
• Triage, investigate, and respond to security alerts across endpoint, identity, email, and cloud environments.
• Perform tactical analysis of EDR telemetry, log sources, and forensic artifacts to identify the scope of compromise and support remediation.
• Investigate suspicious Microsoft 365 activity, including business email compromise (BEC) and adversary-in-the-middle (AITM) attacks, contain threats, and provide actionable guidance to customers.
• Develop and improve processes for incident detection and countermeasure execution.

What You Will Need

Successful candidates will have training or knowledge in one or more of the following areas:

• Incident Handling: training or foundational knowledge of incident response, including investigating targeted threats, malware infections, and unauthorized access.
• Threat Landscape Awareness: foundational knowledge of attack vectors and threat actor TTPs, including frameworks such as MITRE ATT&CK.
• Operating System Fundamentals: understanding of Windows, Mac, and Linux, including Windows file system, registry, scheduled tasks, and running processes.
• Systems Administration: experience administering a network and troubleshooting connectivity and authentication issues, with an understanding of IT architecture in small to large networks.
• Network Analysis Fundamentals: knowledge of network protocols, analysis tools, and network logs.
• Identity Platform Awareness: familiarity with identity and access management platforms such as Okta, Microsoft Entra ID, Active Directory, and similar tools.
• Email Security Awareness: familiarity with Microsoft 365 security and common patterns such as BEC and AITM phishing.
• Third-Party Log Analysis: foundational understanding of log sources across cloud platforms, network devices, identity providers, and email platforms, to support investigation and triage within the NG-SIEM service.
• Incident Remediation: foundational understanding of targeted attacks and the ability to contribute to remediation for compromised organizations.
• Network Operations and Architecture/Engineering: strong understanding of secure network architecture and network operations.
• Programming/Scripting: experience or coursework in Python, PowerShell, or Bash.
• AI Fundamentals: experience or demonstrated interest in using AI to enhance decision-making, streamline workflows, improve efficiency, and drive business outcomes.

All candidates must also:

• Complete technical tasks without supervision.
• Want to grow both technical and soft skills.
• Have strong troubleshooting skills and enjoy solving complex technical problems.
• Contribute to a positive work environment and attitude.

Candidates must be willing to work a 4x10 schedule, including one weekend day, and to work on site on a hybrid schedule.

This role may require periodic alcohol and/or drug testing during employment.

Benefits of Working at CrowdStrike

• Market leader in compensation and equity awards
• Comprehensive physical and mental wellness programs
• Competitive vacation and holidays
• Paid parental and adoption leaves
• Professional development opportunities for all employees
• Employee networks, geographic neighborhood groups, and volunteer opportunities
• Vibrant office culture with world class amenities
• Great Place to Work Certified™ across the globe