Analyst I, Falcon Complete

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, the mission has stayed the same: stop breaches, using the world's most advanced AI-native platform. The company runs large scale distributed systems that process almost 3 trillion events per day, and that volume grows every day. Customers across all industries rely on CrowdStrike to keep their businesses running and their communities safe.

CrowdStrikers are expected to build their careers with flexibility and autonomy while contributing to a culture of responsible AI adoption, experimentation, and innovation. The team uses an AI-first mindset to accelerate execution, build expertise, uncover insights, and solve complex problems. CrowdStrike looks for people with limitless passion, a relentless focus on innovation, and a fanatical commitment to customers, community and each other.

About the Role

CrowdStrike is looking for self-driven technical analysts who want to make a difference in global security by protecting organizations from the most advanced attackers. The CrowdStrike virtual security operations center offers a wide range of experiences, with real-time detection and response to incidents for customers.

This role is open to candidates located in either the PST or MST timezone.

Ideal Candidate for the Associate Analyst, Endpoint Protection Team

• A passion for cybersecurity and a strong desire to build a career protecting organizations from sophisticated threats.
• Self-motivated, with a drive to quickly build skills.
• Interest in new, innovative work that matters to customers.
• A foundational background in Information Technology or Information Security.
• Clear and professional communication with customers and colleagues.
• Enjoys working with smart, like-minded people to learn every day.
• Interest in the evolving role of AI in security operations, including AI models, prompt engineering, and agentic SOC workflows.

What You'll Do

• Deliver clear, concise, and professional customer communications as the primary first point of contact.
• Produce high-quality written and verbal communications, recommendations, and findings for customers and internal teams.
• Triage, investigate, and respond to security alerts across endpoint, identity, email, and cloud environments.
• Conduct tactical analysis of EDR telemetry, log sources, and forensic artifacts to identify the scope of compromise and support remediation.
• Investigate suspicious Microsoft 365 activity, including business email compromise (BEC) and adversary-in-the-middle (AITM) attacks, contain the threat, and give customers actionable guidance.
• Develop and improve processes for incident detection and countermeasures.

What You'll Need

Successful candidates will have training or knowledge in one or more of the following areas:

• Incident Handling: training or foundational knowledge in incident response, including investigating targeted threats, malware infections, and unauthorized access.
• Threat Landscape Awareness: foundational knowledge of attack vectors and threat actor TTPs, including frameworks such as MITRE ATT&CK.
• Operating System Fundamentals: understanding of Windows, Mac, and Linux, including file system, registry, scheduled tasks, and running processes.
• Systems Administration: experience administering a network and troubleshooting connectivity and authentication issues, with an understanding of IT architecture in small to large networks.
• Network Analysis Fundamentals: knowledge of network protocols, network analysis tools, and analysis of network logs.
• Identity Platform Awareness: familiarity with identity and access management platforms such as Okta, Microsoft Entra ID, Active Directory, and similar technologies.
• Email Security Awareness: familiarity with Microsoft 365 security and common attack patterns such as BEC and AITM phishing.
• Third-Party Log Analysis: foundational understanding of log sources across cloud platforms, network devices, identity providers, and email platforms to support investigation within the NG-SIEM service.
• Incident Remediation: foundational understanding of targeted attacks and the ability to contribute to remediation efforts for compromised organizations.
• Network Operations and Architecture/Engineering: strong understanding of secure network architecture and network operations.
• Programming/Scripting: experience or coursework in Python, PowerShell, or Bash.
• AI Fundamentals: experience or interest in using AI technologies to enhance decision-making, streamline workflows, and improve efficiency.
• Proven experience using AI technologies to enhance decision-making, streamline workflows, improve efficiency and drive business outcomes.

Additional Qualifications

All candidates must also have the following:

• Ability to complete technical tasks without supervision.
• Desire to grow technical and soft skills.
• Strong troubleshooting skills and a passion for solving complex technical problems.
• Ability to foster a positive work environment and attitude.

Requirements

• Must be willing to work a 4x10 schedule, including one weekend day.

This role may require periodic alcohol and/or drug testing during employment.

Benefits of Working at CrowdStrike

• Market leader in compensation and equity awards
• Comprehensive physical and mental wellness programs
• Competitive vacation and holidays
• Paid parental and adoption leaves
• Professional development opportunities for all employees
• Employee Networks, geographic neighborhood groups, and volunteer opportunities
• Vibrant office culture with world class amenities
• Great Place to Work Certified™ across the globe

CrowdStrike is an equal opportunity employer committed to a culture of belonging. It supports veterans and individuals with disabilities through its affirmative action program. The company does not discriminate on the basis of race, color, sex, sexual orientation, gender identity, age, national origin, disability, or any other characteristic protected by law, and bases employment decisions on valid job requirements.

CrowdStrike participates in the E-Verify program.

CrowdStrike, Inc. considers pay based on factors including relevant work experience, skills, certifications, job level, supervisory status, and location. The base salary range for U.S. candidates is $85,000 - $120,000 per year, plus eligibility for bonuses, equity grants and a benefits package that includes health insurance, 401k and paid time off. Details about the U.S. benefits package are available on the company's Workday careers page.