Sr. Analyst, Falcon Complete (Remote)

CrowdStrike • USA TX Remote, TX

7d • $125,000 - $180,000 • Remote

About The Position

CrowdStrike is seeking a highly motivated, self-driven technical analyst to protect organizations against advanced attackers. The role is part of CrowdStrike’s virtual security operations center, where analysts detect and respond to customer incidents in real time. The Senior Analyst serves as technical lead for complex, high-severity and multi-customer incidents, guides customers through critical investigations and remediation, and helps strengthen team capability and response processes. The position also involves applying AI technologies to security operations and contributing to the security community through thought leadership and industry engagement.

The role requires working a 4x10 schedule, including one weekend day. It may require periodic alcohol and/or drug testing during employment. Candidates should have a relevant degree or equivalent relevant work experience and/or training.

Requirements

• Extensive experience in one or more relevant areas, including incident handling, threat analysis, computer forensics, malware analysis, operating systems, systems administration, network analysis, identity platforms, email security, third-party log analysis, incident remediation, network architecture, programming/scripting, or AI platforms.
• Expert-level experience leading complex incident response investigations, including high-severity, multi-host, and multi-customer incidents from triage through remediation; experience investigating host or user compromises, organized crime groups, and nation-state adversaries.
• Deep knowledge of attack vectors and threat actor tactics, techniques, and procedures, with advanced proficiency applying and extending MITRE ATT&CK.
• Advanced forensic analysis experience across host, memory, and network artifacts, using a broad toolkit to determine compromise scope and root cause.
• Advanced static and dynamic malware analysis skills, including reverse-engineering concepts and behavioral analysis.
• Expert knowledge of Windows, Mac, and/or Linux, with particular depth in at least one operating system.
• Advanced experience administering and securing enterprise network environments, including IT architecture, authentication systems, and common infrastructure attack paths.
• Expert knowledge of network protocols and traffic analysis, including identifying attack patterns, lateral movement, and exfiltration.
• Deep expertise with identity and access management platforms such as Okta, Microsoft Entra ID, and Active Directory, including identity-based attack techniques and credential abuse.
• Advanced experience investigating and remediating Microsoft 365 security incidents, including BEC and AITM attack chains.
• Advanced proficiency querying and correlating cloud, network, identity-provider, and email-platform logs in a SIEM environment to build detection logic and support complex investigations.
• Proven expertise planning and executing remediation for compromised environments, including multi-host and multi-platform scenarios and coordination with third-party containment providers.
• Expert understanding of secure network architecture and hands-on experience navigating and troubleshooting enterprise networks during complex investigations.
• Experience developing scripts and automation with Python, PowerShell, or Bash for investigative tooling, remediation workflows, and detection and response capabilities.
• Experience with AI models, platforms, and tools, including MCP servers and agentic frameworks; ability to apply AI to security operations, prompt engineering, automation, capability development, and team adoption.
• Demonstrated use of AI to improve decision-making, streamline workflows, increase efficiency, and drive business outcomes.
• Ability to independently lead complex technical investigations and serve as a subject matter expert.
• Demonstrated commitment to mentoring peers and junior team members.
• Contributing thought leader in the incident response industry.
• Project management skills and ability to complete process-improvement initiatives.
• Ability to foster a positive work environment and attitude.
• Willingness to work a 4x10 schedule, including one weekend day.
• BA/BS or MA/MS in Computer Science, Computer Engineering, Math, Information Security, Information Assurance, Information Security Management, Intelligence Studies, Cybersecurity, Cybersecurity Policy, or a related field; applicants without a degree but with relevant work experience and/or training will be considered.

Responsibilities

• Lead complex investigations across endpoint, identity, email, network, and cloud environments, including high-severity and multi-customer incidents.
• Analyze EDR telemetry, forensic artifacts, and network data to establish root cause, attacker tactics, techniques and procedures, and the scope of compromise.
• Investigate sophisticated Microsoft 365 attacks, including business email compromise and adversary-in-the-middle attacks, and advise customers.
• Review malware through static and dynamic analysis to understand behavior, identify indicators of compromise, and inform detection and remediation.
• Develop and lead strategic and surgical remediation plans, coordinating third-party platform containment across customer infrastructure.
• Mentor and develop analysts, and contribute to training materials, knowledge-base content, and team capability development.
• Identify and lead process improvements, contribute to standard operating procedures, and build automation to improve detection and response.
• Represent CrowdStrike through thought leadership, including blog posts, CrowdCasts, and external speaking engagements.
• Communicate with customers at an expert level, manage technical escalations, and act as a trusted advisor during critical incidents.
• Use AI technologies to enhance security operations, accelerate investigations, automate workflows, and support internal capability development and AI adoption.

Benefits

• Eligibility for bonuses and equity grants.
• Comprehensive benefits package including health insurance, 401(k), and paid time off.
• Comprehensive physical and mental wellness programs.
• Competitive vacation and holidays.
• Paid parental and adoption leaves.
• Professional development opportunities for employees at all levels and in all roles.
• Employee Networks, geographic neighborhood groups, and volunteer opportunities.
• Vibrant office culture with world-class amenities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior