Analyst I, Falcon Complete GovCloud (Hybrid, St. Louis)

CrowdStrike•Saint Louis, MO

5d•Hybrid

About The Position

CrowdStrike Falcon Complete GovCloud is seeking a self-driven technical analyst to protect government and public sector organizations from advanced cyber threats. The role is based in St. Louis, Missouri, and works exclusively within CrowdStrike’s FedRAMP-authorized GovCloud environment, supporting customers with heightened compliance, data-sovereignty, and security requirements. It is the entry point in the Falcon Complete GovCloud analyst career path, applying intermediate cybersecurity and technical skills while developing advanced communication, analytical, and problem-solving capabilities. The analyst detects and responds to security incidents in real time, supporting government customers throughout alert triage, security monitoring, threat detection, digital forensics, incident response, malware analysis, and remediation. The position also involves communicating findings and recommendations to customers and internal stakeholders, managing concurrent incident response assignments, and contributing to public-facing thought leadership.

Requirements

Experience in one or more relevant areas, such as incident handling, computer forensics, systems administration, security monitoring and detection, network forensics, malware analysis, incident remediation, network operations or architecture, or security-related programming and scripting.
Incident handling experience investigating or managing responses to threats such as advanced persistent threats, organized crime, or hacktivists; government, Department of War, or public sector experience is preferred.
Intermediate ability to develop triage strategies, use complex analysis methods, and independently manage multiple alert sources.
Experience with forensic analysis tools and intermediate ability to develop forensic strategies, manage evidence sources, and produce detailed investigation reports.
Intermediate understanding of Windows, Mac, and Linux system internals, configurations, scripting automation, troubleshooting, and security hardening.
Intermediate capability to develop monitoring solutions and detection methods, create alert workflows and custom detection rules, manage security tools, and optimize detection accuracy.
Knowledge of network protocols, network analysis tools, and analysis of network logs.
Intermediate ability to use static and dynamic malware analysis techniques and contribute to malware analysis projects.
Understanding of targeted attack lifecycles and ability to develop tactical and strategic remediation plans, including for organizations subject to federal compliance requirements.
Understanding of secure network architecture and operations, including federal network security standards applicable to GovCloud.
Experience programming or scripting in one or more of C, C#, VB, Python, Perl, Ruby on Rails, or .NET for automation, tooling, or analysis support.
Experience using AI technologies to enhance decision-making, streamline workflows, improve efficiency, and drive business outcomes.
Advanced analytical thinking, communication, presentation, and problem-solving capabilities.
Intermediate time management skills, including prioritization, workload management, and meeting deadlines while maintaining quality under pressure.
Desire to grow technical and interpersonal skills and commitment to continuous professional development in federal cybersecurity.
Strong organizational skills to manage concurrent incident response workstreams.
Ability to foster a positive, collaborative work environment and maintain a professional attitude under pressure.
A bachelor's or master's degree in a listed or related field is preferred; applicants without a degree may be considered with relevant work experience, military service, and/or industry training and certifications.
Ability to periodically undergo and pass alcohol and/or drug testing during employment, if required.
Ability to periodically undergo and pass additional background and fingerprint checks consistent with government customer requirements.

Nice To Haves

Experience supporting government, Department of War, or public sector environments.
A bachelor's or master's degree in Computer Science, Computer Engineering, Mathematics, Information Security, Information Assurance, Information Security Management, Intelligence Studies, Cybersecurity, Cybersecurity Policy, or a related field.

Responsibilities

Execute alert triage in the GovCloud environment, developing triage strategies, managing alert sources, conducting investigations, and documenting findings within FedRAMP and applicable federal compliance boundaries.
Operate and configure the CrowdStrike Falcon Sensor, analyze security event patterns, and adapt monitoring to customer requirements.
Implement security monitoring and detection solutions, manage security tools, develop detection methods, and create custom detection rules.
Apply threat detection capabilities to protect government and public sector customers.
Conduct digital forensics, manage evidence sources, document investigations, and produce reports supporting customer incident response.
Manage incidents across the full response lifecycle, including response planning, containment, evidence collection, and cross-team coordination in alignment with NIST SP 800-61 and applicable federal frameworks.
Contribute to malware analysis and provide practical input to containment and remediation planning.
Use the CrowdStrike Falcon platform to investigate and triage incidents, apply filters, generate reports, and use threat graphs.
Troubleshoot complex technical issues, conduct root-cause analysis, identify recurring patterns, and implement preventive measures.
Administer Linux environments, configure systems, automate tasks with shell scripting, and maintain security hardening standards.
Administer Windows systems and Active Directory, maintain security and compliance features, and troubleshoot complex system issues.
Communicate technical findings and recommendations to government and public sector customer management and internal stakeholders.
Present technical findings and recommendations clearly and persuasively, adapting to audience feedback.
Solve complex operational problems, anticipate issues, and assess long-term implications of solutions.
Prioritize and manage concurrent incident response assignments and workload.
Contribute to industry thought leadership through blog posts, CrowdCasts, and other public-facing engagements.
Use AI technologies to enhance decision-making, workflows, efficiency, and business outcomes.