Analyst I, Falcon Complete (Hybrid, San Antonio)

CrowdStrike • San Antonio, TX

12d • $85,000 - $120,000 • Hybrid

About The Position

CrowdStrike is seeking a motivated, self-driven technical analyst to help protect organizations from advanced attackers. The role works within CrowdStrike’s virtual security operations center, detecting and responding to security incidents in real time for customers. The position is open to candidates in San Antonio, Texas, and requires a 4x10 schedule that includes one weekend day.

The analyst investigates security detections across endpoint, identity, email, network, and cloud environments; analyzes telemetry, logs, and forensic artifacts to establish the cause and scope of compromise; and recommends targeted remediation. The role also investigates Microsoft 365 security incidents, performs basic malware analysis, improves detection and response processes, and serves as a primary customer contact during incident response. Analysts provide professional written and verbal communications, recommendations, and findings to customers and internal teams.

Candidates should bring experience in one or more relevant cybersecurity areas, including incident handling, threat analysis, computer forensics, malware analysis, operating systems, systems administration, network analysis, identity platforms, email security, third-party log analysis, incident remediation, network operations, programming or scripting, and applying AI technologies to security workflows. Candidates must be able to complete technical tasks without supervision and be motivated to develop their technical and communication skills while contributing to a positive work environment. A relevant bachelor’s or master’s degree is listed, but applicants without a degree may be considered if they have relevant work experience and/or training.

The role may require periodic alcohol and/or drug testing during employment. CrowdStrike offers a base salary range of $85,000–$120,000 per year for U.S. candidates, with eligibility for bonuses, equity grants, and a comprehensive benefits package.

Requirements

• Experience in one or more relevant areas, such as incident handling, threat landscape analysis, computer forensic analysis, malware analysis, operating systems, systems administration, network analysis, identity platforms, email security, third-party log analysis, incident remediation, network operations, programming/scripting, or AI fundamentals.
• Incident handling experience coordinating responses to a broad range of security events, potentially involving multiple simultaneous incidents, hosts, and customer environments.
• Knowledge of attack vectors and threat actor tactics, techniques, and procedures, with experience applying frameworks such as MITRE ATT&CK to investigations.
• Hands-on experience using forensic tools and/or performing basic static and dynamic malware analysis, as applicable to the candidate’s experience area.
• Strong understanding of Windows, Mac, and/or Linux, with emphasis on Windows internals such as the file system, registry, scheduled tasks, and running processes.
• Hands-on experience administering networks and resolving connectivity, authentication, and configuration issues in enterprise environments.
• Working knowledge of network protocols and analysis tools, and experience analyzing network traffic for investigations.
• Experience with identity and access management platforms such as Okta, Microsoft Entra ID, or Active Directory.
• Experience investigating Microsoft 365 security incidents, including BEC and AITM attacks.
• Working knowledge of enterprise log sources and experience conducting investigation and triage within a SIEM platform.
• Basic understanding of containment and surgical remediation actions for compromised hosts, including third-party platform containment measures.
• Working knowledge of secure network architecture and hands-on experience troubleshooting and navigating network environments.
• Experience with scripting languages such as Python, PowerShell, or Bash to support investigations or automate repetitive tasks.
• Experience using AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes.
• Ability to complete technical tasks without supervision.
• Desire to grow and expand technical and soft skills.
• Ability to foster a positive work environment and attitude.
• Willingness to work a 4x10 schedule, including a day on the weekend.
• A BA/BS or MA/MS in a listed or related field; applicants without a degree may be considered with relevant work experience and/or training.

Responsibilities

• Triage, investigate, and respond to security detections across endpoint, identity, email, network, and cloud environments.
• Analyze EDR telemetry, log sources, and forensic artifacts to determine the root cause and scope of compromise and develop targeted remediation recommendations.
• Investigate suspicious Microsoft 365 activity, including business email compromise (BEC) and adversary-in-the-middle (AITM) attacks; contain threats and provide actionable customer guidance.
• Perform basic malware analysis to support incident investigation and triage.
• Develop and improve incident-detection processes and the execution of countermeasures.
• Serve as the primary customer point of contact during incident response activities.
• Communicate findings, recommendations, and updates clearly and professionally to customers and internal teams.

Benefits

• Market-leading compensation and equity awards.
• Comprehensive physical and mental wellness programs.
• Competitive vacation and holidays.
• Paid parental and adoption leaves.
• Professional development opportunities for employees at all levels and in all roles.
• Employee Networks, geographic neighborhood groups, and volunteer opportunities.
• Vibrant office culture with world-class amenities.
• Eligibility for bonuses and equity grants.
• Health insurance, 401(k), and paid time off.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level