Intelligence Analyst Intern, GTAC - Summer 2025 (Remote)

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We’re also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Our University Recruiting program is dedicated to attracting and cultivating the future leaders of this industry. This program offers paid positions for students and recent grads, designed to provide exposure to work that makes an impact while being supported through a structured experience with seasoned professionals. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role:

CrowdStrike Intelligence, a core component of CrowdStrike Counter Adversary Operations, is seeking an Intelligence Analyst Intern for its Global Threat Analysis Cell (GTAC) focused on targeted intrusion activity associated with the Democratic Peoples Republic of Korea (DPRK) mission scope. This position will be primarily tasked with tracking adversaries and cyber operations as well as identifying and tracking trends associated with these operations. 

The Intelligence Analyst Intern will be required to research and report on cyber operations at both the strategic and tactical level as part of a close-knit team where collaboration is a critical driver for mission success. This position is instrumental in providing unique insight into adversary operations through finished Intelligence products used by CrowdStrike customers and stakeholders.

What You’ll Do:

Identify and track cyber threats, trends, and new developments by DPRK-Nexus cyber threat actors through analysis of raw information, prior intelligence, and large data sets. Communicate these findings to CrowdStrike Intelligence customers via finished intelligence reports. 

• Assimilate malware reverse engineering and geopolitical intelligence to form a picture of DPRK adversaries

• Identify and track adversarial infrastructure using open source and proprietary tools

• Collect and collate information on the DPRK’s tools, tactics, and procedures

• Apply analytic tradecraft to gathered information to create finished intelligence in varying predetermined suspense and depth

• Collaborate across teams to inform various functions within CrowdStrike Intelligence about activity of interest and to coordinate adversary/campaign tracking

• Prioritize, categorize, and respond to requests for information from internal and external customers

What You’ll Need:

• A rising senior, or graduate-level student currently working towards a Computer Science, Engineering, Cybersecurity, International Relations, or Intelligence Studies degree graduating between December 2025 - June 2026

• Practical knowledge of research/collection tradecraft and analytical methods — to include regular use of common research-related platforms (e.g.,  malware repositories, network infrastructure tracking services, webpage scanners, malware sandboxes, etc.)

• Knowledge of DPRK and Korean Peninsula geopolitical issues and ability to use that information to support understanding of current and future impacts on the cyber threat landscape

• Interest in identifying and tracking adversary tradecraft 

• Ability to produce quality reports of varying lengths on short deadlines, as well as continuing to maintain analysis for and report on long-term strategic assessments with minimal assistance

• Working understanding of network principles and technical terminology

• Ability or willingness to learn to conduct basic technical analysis of the tools and tradecraft used by threat actors

• Strong organization and communication skills and ability to work in a remote-first environment

#LI-Remote

#LI-MK3

What You Can Expect:

• Remote-friendly and flexible work culture

• Market leader in compensation and equity awards

• Paid holidays (including birthday holidays) and 401k matching (where applicable)

• Professional development opportunities including workshops, tech talks, and Executive Speaker Series

• Assigned mentors from across the company for continuous support and feedback

• Participation in companywide initiatives including ERGs, FalconFIT, Wellness Programs, and Employee Assistance Program

• Employee Resource Groups, geographic neighbourhood groups and volunteer opportunities to build connections

• Vibrant office culture with world class amenities

• Ownership of impactful projects that move the company forward

• Great Place to Work Certified™ across the globe

CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.

Right to Work