Sr. Analyst, Falcon Complete (Security Analyst) (Remote)

View full description

Requirements:

• Cyber threat Incident Handling: experience conducting or managing cyber threat related incident response for organizations, investigating targeted threats such as Advanced Persistent Threat, Organized Crime, and Hacktivists.
• Computer Forensic Analysis: a background using a variety of forensic analysis tools in incident response investigations to determine the extent and scope of compromise.
• Systems Administration: an understanding of system internals is required to understand how to implement and execute countermeasures and remediation.
• Network Forensic Analysis: knowledge of network protocols, network analysis tools, and ability to perform analysis of associated network logs.
• Malware Analysis: ability to perform static and dynamic malware analysis to understand the nature of malware
• Incident Remediation: strong understanding of targeted attacks and able to create customized tactical and strategic remediation plans for compromised organizations.
• Network Operations and Architecture/Engineering: strong understanding of secure network architecture and strong background in performing network operations.
• Programming/Scripting: experience coding in Powershell, C, C#, VB, Python, Perl, Ruby on Rails and .NET.

Responsibilities:

• Conduct monitoring and perform in-depth analysis of security alerts.
• Exercise cyber incident handling processes across Windows, Mac, and Linux platforms.
• Perform remote remediation of malware or malicious activity.
• Perform high level malware analysis.
• Develop and improve processes for cyber incident detection, triage, and the execution of countermeasures
• Produce high-quality written and verbal communications, recommendations, and findings to numerous stakeholders including senior leadership within Crowdstrike and customers. .
• Demonstrate industry thought leadership through blog posts, CrowdCasts, and other public speaking events.
• Contribute to internal capability uplift programs or team development.
• Serve as the technical escalation point and mentor for lower grade analysts.
• Provide oversight and quality assurance for issues worked by lower grade analysts.
• Assist in the advancement of security processes and procedures.