Threat Analyst – Machine Learning Operations & Detection Efficacy (Remote)

CrowdStrike•Wenatchee, WA

8d•Remote

About The Position

CrowdStrike’s Data Science Machine Learning Operations and Response Team is seeking a customer- and team-focused Threat Analyst. The role includes proactive and responsive work, with a primary focus on analyzing malware and detections by investigating individual customer detection tickets. The team improves detection capability and efficiency by analyzing malware and other threat detections affecting customers, and helps internal teams address customer inquiries while sharing findings about detection efficacy and false positives with the Data Science organization. The Threat Analyst works closely with Technical Account Managers, Falcon Complete, Data Scientists, and the Malware Research Center in Data Science. Experience investigating detections of potentially malicious behavior identified by machine learning models is a plus.

Requirements

Exposure to and understanding of different types of malware and their functionality.
Experience with malware reverse engineering or malware operations.
Knowledge of programming and scripting languages, particularly Python.
Fundamental understanding of binary file attributes, such as imports, exports, and packers.
Ability to demonstrate practical knowledge of research and collection skills and analytical methods.
General understanding of threat and risk management and assessment.
Familiarity with various operating systems.
Proven experience using AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes.

Nice To Haves

Experience in a security operations center or similar environment responding to incidents.
Thorough understanding of Windows OS internals and the Windows API.
Knowledge of macOS and/or Linux.
Familiarity with tools used in targeted and criminal cyber intrusions.
Background in exploit and vulnerability analysis.
Knowledge of programming languages including C, C++, Java, and assembly.
Experience with threat detections by machine learning.

Responsibilities

Analyze detection data, including customer reports, to identify ways to improve machine learning models.
Perform tasks that support better management of false-positive detections.
Analyze binary files to determine whether they are legitimate.
Review current product detections to ensure they meet company standards.
Address internal questions and concerns about customer threat detections.

Benefits

Market-leading compensation and equity awards.
Comprehensive physical and mental wellness programs.
Competitive vacation and holidays.
Paid parental and adoption leaves.
Professional development opportunities for all employees, regardless of level or role.
Employee Networks, geographic neighborhood groups, and volunteer opportunities.
Health insurance.
401(k).
Paid time off.
Eligibility for bonuses and equity grants.