Principal Analyst, Falcon Complete (Remote, GBR)

About the Role:

CrowdStrike is looking for highly motivated, self-driven, technical analysts dedicated to making a difference in global security by protecting organizations against the most advanced attackers in the world. Our CrowdStrike virtual security operations center offers opportunities to expand your skill set through a wide variety of experiences, detecting and responding to incidents as they occur in real-time for our customers.

Am I a Principal Analyst in the Falcon Complete Team?

• Do you find yourself interested in putting your hands-on technical skills to the test in detecting, containing, and remediating incidents?

• Are you self-motivated and looking for an opportunity to rapidly accelerate your skills?

• Do you crave new and innovative work that actually matters to your customer?

• Do you have an Incident Response or Information Security background that you would like to apply in a new and challenging environment?

• Are you capable of leading technical teams and interacting well with customers?

• Do you love working around like-minded, smart people who you can coach and mentor?

What You’ll Do:

In partnership with a Falcon Complete Fireteam Manager, a Principal is expected to:

• Provide technical leadership for a Fireteam consisting of Analysts.

• Coach and mentor through one-to-one sessions with the Analysts, supporting the Fireteam Manager in creating development plans and goals for the team.

• Conduct monitoring and perform in-depth analysis of security alerts, and execute on incident handling processes across Windows, Mac, and Linux platforms.

• Develop and improve processes for incident detection, triage, and the execution of countermeasures.

• Produce high-quality written and verbal communications, recommendations, and findings to leadership.

• Serve as the technical escalation point and lead for high severity incidents.

• Provide oversight and quality assurance for the Fireteam, including the delivery of constructive feedback to help with development and performance planning.

• Work with leadership to create and manage projects and activities that align with the Falcon Complete mission and goals.

Personal and Behavioral Characteristics:

• Be a strong advocate for Falcon Complete and act as a senior role model within the Fireteam and within Falcon Complete EMEA.

• Be flexible and adaptable in approach to be able to get the best out of each team member. 

• Be open to feedback and display a commitment to personal development.

• Team-player and a commitment to work in line with our “one team, one fight” ethos.

• Ability to handle high pressure situations in a productive and professional manager.

• Ability to apply logical reasoning in order to make risk-based decisions.

• Open to new ideas and change to evolve and develop the team and the capability overall. 

• Ability to multitask and prioritise own workload as well as that of others.

What You'll Need:

Successful candidates will have experience in one or more of the following areas:

• Incident Handling: experience conducting or managing incident response for organizations, as part of an internal team or managed service. 

• Computer Forensic Analysis: a background using a variety of forensic analysis tools in incident response investigations to determine the extent and scope of compromise.

• Systems Administration: an understanding of system internals is required to understand how to implement and execute countermeasures and remediation.

• Network Forensic Analysis: knowledge of network protocols, network analysis tools, and ability to perform analysis of associated network logs.

• Malware Analysis: ability to perform static and dynamic malware analysis to understand the nature of malware

• Incident Remediation: strong understanding of targeted attacks and able to create customized tactical and strategic remediation plans for compromised organizations.

• Network Operations and Architecture/Engineering: strong understanding of secure network architecture and strong background in performing network operations.

• Programming/Scripting: experience coding in Powershell, C, C#, VB, Python, Perl, Ruby on Rails, and.NET.

Additionally, all candidates must possess the following qualifications:

• 6+ years of relevant incident handling experience.

• Strong verbal, project management and communication skills.

• Strong experience with Mac OS, Windows, Linux and Container platforms.

Education:

BA or BS / MA or MS degree in Computer Science, Computer Engineering, Mathematics, Information Security, Information Assurance, Information Security Management, Intelligence Studies, Cybersecurity, Cybersecurity Policy, or a related field. Or suitable relevant work experience; a degree is not a mandatory requirement for this role.

#LI-JP1

#LI-EV1

#LI-Remote