Threat Analyst (Remote, ROU) at Crowdstrike

Candidates must have a comprehensive understanding of common adversary tactics and techniques, and demonstrated ability to analyze complex situations and articulate information clearly to diverse stakeholders. A profound understanding of and ability to interpret logs generated by systems, networks, and applications is required, along with proven experience in identifying and isolating unique patterns within process behavior or logs (e.g., RegEx, correlation rules, YARA). Prior experience with EDR products and endpoint security monitoring is necessary, as is expertise in and understanding of Windows, Linux, and MacOSX operating systems. The ability to contribute both independently and collaboratively within a team environment, possess an inquisitive nature and the ability to conduct thorough research using historical data, exhibit a keen eye for documenting pertinent details and facilitating focused discussions, and eagerness to acquire new knowledge and skills are also essential. Bonus points for experience in a security operations center or similar environment responding to incidents, demonstrated ability to automate repetitive tasks, in-depth experience with and knowledge of penetration testing (red team) methodologies and tools, and forensic experience.