Analyst I, Falcon Complete GovCloud (Hybrid, St. Louis)

CrowdStrike•St. Louis, MO

12d•$85,000 - $120,000•Hybrid

About The Position

CrowdStrike is seeking a motivated, self-directed technical analyst to help protect organizations from advanced cyberattacks. The role works within CrowdStrike’s virtual security operations center, detecting and responding to customer incidents in real time. The position is open to candidates in St. Louis, Missouri, and requires a hybrid schedule with on-site work. Analysts investigate security detections across endpoint, identity, email, network, and cloud environments; analyze telemetry, logs, and forensic artifacts; and provide customers with practical recommendations and clear communications during incident response. The role also supports process improvements and basic malware analysis. Candidates should be able to perform technical work independently, communicate professionally, and be interested in developing their skills, including in the use of AI in security operations. The role requires a 4x10 schedule that includes one weekend day. A relevant bachelor’s or master’s degree is specified, though applicants without a degree may be considered based on relevant work experience or training. Periodic alcohol and/or drug testing may be required.

Requirements

Experience in one or more relevant areas, including incident handling, threat landscape analysis, computer forensics, malware analysis, operating systems, systems administration, network analysis, identity platforms, email security, third-party log analysis, incident remediation, network operations, programming or scripting, or AI fundamentals.
Hands-on incident response experience, including coordinating investigations across multiple incidents, hosts, or customer environments, is among the listed experience areas.
Working knowledge of attack vectors and threat actor tactics, techniques, and procedures; experience applying frameworks such as MITRE ATT&CK to active investigations is among the listed experience areas.
Relevant experience with forensic tools, basic static and dynamic malware analysis, Windows, Mac and/or Linux, network protocols and analysis tools, identity and access platforms, Microsoft 365 incidents, SIEM investigations, or scripting languages such as Python, PowerShell, or Bash is among the listed experience areas.
Experience using AI technologies to enhance decision-making, workflows, efficiency, or business outcomes is listed as a desired experience area.
Ability to complete technical tasks without supervision.
Desire to grow and expand technical and soft skills.
Ability to foster a positive work environment and attitude.
Willingness to work a 4x10 schedule that includes a weekend day.
Willingness to work on site on a hybrid schedule.
BA/BS or MA/MS in Computer Science, Computer Engineering, Math, Information Security, Information Assurance, Information Security Management, Intelligence Studies, Cybersecurity, Cybersecurity Policy, or a related field; applicants without a degree may be considered with relevant work experience and/or training.
May be required to periodically undergo and pass alcohol and/or drug tests during employment.

Responsibilities

Triage, investigate, and respond to security detections across endpoint, identity, email, network, and cloud environments.
Analyze EDR telemetry, log sources, and forensic artifacts to determine the root cause and scope of compromise and develop targeted remediation recommendations.
Investigate suspicious Microsoft 365 activity, including business email compromise (BEC) and adversary-in-the-middle (AITM) attacks; contain threats and provide actionable customer guidance.
Perform basic malware analysis to support investigation and incident triage.
Develop and improve incident detection processes and the execution of countermeasures.
Serve as the primary customer contact during incident response activities and deliver clear, concise, professional communications.
Prepare written and verbal communications, recommendations, and findings for customers and internal stakeholders.