Analyst I, Falcon Complete (Remote, PST/MST)

CrowdStrike•USA UT Remote, UT

5d•$85,000 - $120,000•Remote

About The Position

CrowdStrike is seeking a motivated, self-driven technical analyst to help protect organizations from advanced cyber threats. The role is part of CrowdStrike’s virtual security operations center, where analysts detect and respond to customer incidents in real time and can expand their skills through varied security operations work. Candidates must be located in the Pacific or Mountain time zone. The position follows a 4x10 schedule that includes one weekend day. The analyst serves as a primary first point of contact for customers, communicating findings and recommendations clearly and professionally. The work includes triaging and investigating alerts across endpoint, identity, email, and cloud environments; analyzing endpoint detection and response (EDR) telemetry, logs, and forensic artifacts; investigating Microsoft 365 threats such as business email compromise and adversary-in-the-middle attacks; supporting containment and remediation; and improving detection and response processes. The role values foundational cybersecurity and IT knowledge, strong troubleshooting and communication skills, and an interest in applying AI to security operations. A BA, BS, MA, or MS in a relevant discipline is listed; applicants without a degree may be considered if they have relevant work experience and/or training. The role may require periodic alcohol and/or drug testing. The stated U.S. base salary range is $85,000–$120,000 per year, with eligibility for bonuses, equity grants, and a comprehensive benefits package.

Requirements

Training or foundational knowledge of incident handling and security-event investigation, including targeted threats, malware infections, and unauthorized access.
Foundational awareness of threat vectors, threat actor tactics, techniques, and procedures, including familiarity with frameworks such as MITRE ATT&CK.
Understanding of Windows, Mac, and Linux, including Windows file systems, registry, scheduled tasks, and running processes.
Systems administration experience, including network administration and troubleshooting connectivity and authentication issues, and understanding IT architectures in small to large networks.
Knowledge of network protocols and network analysis tools, and ability to analyze network logs.
Familiarity with identity and access management platforms such as Okta, Microsoft Entra ID, and Active Directory.
Familiarity with Microsoft 365 security and attack patterns such as business email compromise and adversary-in-the-middle phishing.
Foundational understanding of log sources across cloud platforms, network devices, identity providers, email platforms, and other enterprise technologies for investigation and triage within NG-SIEM services.
Foundational understanding of targeted attacks and ability to contribute to tactical and strategic remediation efforts.
Strong understanding of secure network architecture and a strong background in network operations.
Experience or coursework in scripting languages such as Python, PowerShell, or Bash.
Experience or demonstrated interest in using AI to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes.
Ability to complete technical tasks without supervision.
Desire to grow and expand technical and soft skills.
Strong troubleshooting skills and passion for solving complex technical problems.
Ability to foster a positive work environment and attitude.
Willingness to work a 4x10 schedule, including a weekend day.
BA, BS, MA, or MS in Computer Science, Computer Engineering, Math, Information Security, Information Assurance, Information Security Management, Intelligence Studies, Cybersecurity, Cybersecurity Policy, or a related field; applicants without a degree may be considered with relevant work experience and/or training.

Nice To Haves

Foundational knowledge or training in one or more of the listed cybersecurity, systems, networking, identity, email-security, scripting, or AI areas.
Relevant work experience and/or training in lieu of a degree.
Demonstrated interest in applying AI technologies to security operations.

Responsibilities

Deliver clear, concise, professional customer communications as the primary first point of contact.
Provide written and verbal communications, recommendations, and findings to customers and internal stakeholders.
Triage, investigate, and respond to security alerts across endpoint, identity, email, and cloud environments.
Analyze EDR telemetry, log sources, and forensic artifacts to identify the scope of compromise and support remediation.
Investigate suspicious Microsoft 365 activity, including business email compromise and adversary-in-the-middle attacks; contain threats and provide actionable customer guidance.
Develop and improve incident-detection processes and the execution of countermeasures.

Benefits

Bonuses and equity grants eligibility.
Health insurance.
401(k).
Paid time off.
Comprehensive physical and mental wellness programs.
Competitive vacation and holidays.
Paid parental and adoption leaves.
Professional development opportunities for all employees regardless of level or role.
Employee Networks, geographic neighborhood groups, and volunteer opportunities.
Office amenities.