Regional Principal Analyst, Falcon Complete
New
C
CrowdStrikeCybersecurity
The base salary range for this position for all U.S. candidatesFull-TimePrincipal
SalaryThe base salary range for this position for all U.S. candidates is $145,000 - $220,000 per year, with eligibility for bonuses, equity grants and a comprehensive benefits package that includes health insurance, 401k and paid time off.
Apply NowOpens the employer's application page
Job Details
- Experience
- Extensive experience in multiple of the following areas
- Required Skills
- PythonLinux
Requirements
- Bring extensive experience in multiple listed technical areas.
- Have expert-level experience leading complex incident response investigations, including high-severity, multi-host, and multi-customer incidents from triage through remediation.
- Investigate host and user compromises, organized crime groups, and sophisticated nation-state adversaries.
- Apply threat actor tactics, techniques, and procedures and MITRE ATT&CK to detection improvements and investigations.
- Conduct forensic analysis of host, memory, and network artifacts and perform static and dynamic malware analysis.
- Have expert knowledge of Windows, Mac, and/or Linux, with particular depth in at least one operating system.
- Understand enterprise network environments, IT architecture, authentication systems, network protocols, and attack patterns.
- Have expertise in identity platforms such as Okta, Microsoft Entra ID, and Active Directory, and investigate Microsoft 365 security incidents.
- Query and correlate third-party logs across cloud platforms, network devices, identity providers, and email platforms in a SIEM environment.
- Develop and execute remediation plans for compromised environments, including multi-host and multi-platform scenarios.
- Develop scripts and automation using Python, PowerShell, or Bash.
- Have experience with AI models, platforms, MCP servers, and agentic frameworks, including applying AI to security operations and workflow automation.
- A relevant BA, BS, MA, or MS degree is listed; applicants without a degree may be considered with relevant work experience and/or training.
Responsibilities
- Advise Regional Directors and senior leadership on Falcon Complete service delivery.
- Maintain technical consistency, quality standards, and best practices across regional operations.
- Support Fireteam Principal Analysts on complex or ambiguous cases and independently validate or extend findings when requested.
- Review closed cases against defined criteria and document quality findings.
- Identify detection gaps, false-positive patterns, threat trends, skill gaps, and opportunities for operational improvements.
- Coordinate with Product and Engineering on detection gaps, platform bugs, and feature requests.
- Work with OverWatch, Intelligence, Watchtower, and other Regional Principal Analysts on threat trends, detection tuning, and shared review standards.
- Collaborate with the Section 3 AI Automation Team on regional automation opportunities.
- Develop technical expertise through hands-on engagement and contribute to industry events and publications.
View Full Description & ApplyYou'll be redirected to the employer's site
