Threat Analyst

Employment Type: Full-time Location Type: Remote

Position Overview

CrowdStrike is a global leader in cybersecurity, protecting the people, processes, and technologies that drive modern organizations. Our mission is to stop breaches, and we have redefined modern security with the world's most advanced AI-native platform. We are a mission-driven company that cultivates a culture of flexibility and autonomy, empowering every CrowdStriker to own their careers. We are seeking talented individuals with limitless passion, a relentless focus on innovation, and a fanatical commitment to our customers, community, and each other. The future of cybersecurity starts with you.

The CrowdStrike Data Science Machine Learning Operations and Response Team is looking for a customer- and team-focused Threat Analyst. This role involves both response and proactive responsibilities, making it ideal for individuals starting or considering a career in detections and reverse engineering. The primary focus will be analyzing malware and detections by investigating individual customer detection tickets, with the goal of improving detection capability and efficiency. Experience with detections of potentially malicious behavior by machine learning models is a plus.

This role will work closely with internal teams such as Technical Account Managers, Falcon Complete, Data Scientists, and the Malware Research Center in Data Science.

Responsibilities

• Review current product detections to ensure they are performing to company standards.
• Perform tasks to enable better management of false positive detections.
• Analyze binary files to determine their legitimacy.
• Address internal questions and concerns regarding customer threat detections.
• Help internal teams respond to customer inquiries about threat detection.
• Provide information on the effects of our detections to the Data Science organization, including detection efficacy and management of false positive detections.

Requirements

• Exposure and understanding of different types and functionality of malware.
• Basic knowledge of reverse engineering malware or malware operations.
• Fundamental understanding of attributes of binary files such as imports/exports and packers.
• Ability to demonstrate practical knowledge of research/collection skills and analytical methods.
• General understanding of threat/risk management and threat/risk assessment.
• Knowledge of programming and scripting languages, particularly Python.
• Familiarity with various operating systems.
• Ability to break down complex problems into workable components.

Bonus Points

• Experience in a security operations center or similar environment responding to incidents.
• Good understanding of Windows OS internals and the Windows API.
• Knowledge of MacOS and/or Linux.
• Familiarity with tools used in targeted and criminal cyber-intrusions.
• A background in exploit and vulnerability analysis.
• Knowledge of a variety of programming languages including C, C++, Java, and assembly.
• Experience with threat detections by machine learning.

Education

• BA/BS or MA/MS degree or equivalent experience in Computer Science, Information Security, or a related field.

Benefits of Working at CrowdStrike

• Remote-friendly and flexible work culture.
• Market leader in compensation and equity awards.
• Comprehensive physical and mental wellness programs.
• Competitive vacation and holidays for recharge.
• Paid parental leave.

#LI-EV1 #LI-Remote