Sr. Threat Hunting Intelligence Analyst II (Remote)

CrowdStrike•Austin, TX

10d•Remote

About The Position

CrowdStrike’s Counter Adversary Operations (CAO) Elite team is seeking an experienced, self-driven Senior Analyst to help protect organizations against advanced attackers. The analyst will partner closely with a dedicated customer, using CAO resources and expertise to deliver tailored threat hunting and customer-specific threat intelligence operations. After learning the team’s custom tools, workflows, and methodologies, the analyst will provide actionable findings, recommendations, and support that address the customer’s requirements and environment. The role includes maintaining a trusted customer relationship, conducting sophisticated threat hunts, researching dark web data and relevant threats, and delivering regular briefings and presentations. The analyst will also respond to ad hoc customer requests and collaborate across CrowdStrike teams to develop creative solutions. Over time, the role may include research, service improvement, specialized intelligence work, and participation in projects with other CrowdStrike teams. Travel may be required on short notice, up to 5% of the time.

Requirements

At least 5 years of experience in two or more of the following areas: incident response or security operations, threat hunting, cyber threat intelligence, or dark web monitoring.
Strong organizational skills and the ability to communicate executive-level and detailed findings to clients, as well as tasks, guidance, and methodology to internal teams.
A customer-focused, solution-oriented approach to turning challenges into positive security outcomes.
Ability to collaborate in a customer-focused team, share knowledge, support colleagues, and remain accountable for assigned deliverables.
Experience presenting, briefing, and delivering reports to stakeholders ranging from individual contributors to executives.
Experience conducting threat hunting or managing incident response, including investigation of targeted threats such as advanced persistent threats, organized crime, and hacktivists.
Knowledge of cyber threat intelligence terminology and data communication concepts and technologies.
Technical understanding of security across multiple cloud environments, including production, development, and isolated workspaces, and knowledge of enterprise SaaS platforms, their interconnected ecosystems, and security vulnerabilities.
Proven experience using AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes.
Experience validating security prevention and detection capabilities against complex attacks using the MITRE ATT&CK framework, security validation methodologies, and automated testing approaches.
Ability to travel on short notice, up to 5% of the time.

Nice To Haves

Understanding of contemporary scripting languages.
Familiarity with application programming interfaces (APIs).

Responsibilities

Own a dedicated customer account, support customer satisfaction, and serve as a trusted advisor to the customer’s internal teams.
Conduct threat hunting, dark web research, and tailored threat intelligence research based on the customer’s requirements and environment.
Prepare and deliver regular customer presentations on intelligence reports, dark web alerts, and threat hunting findings.
Partner across CrowdStrike teams to develop and implement solutions that exceed customer expectations.
Respond to customer requests relating to threat intelligence, threat hunting, and dark web monitoring.
Provide actionable threat intelligence and findings, and deliver recommendations relevant to the customer.
Conduct research, help improve the threat hunting service, develop specialized intelligence knowledge, and work with other CrowdStrike teams on projects.