Incident Response Analyst - Skillbridge (remote)

CrowdStrike CrowdStrike · Enterprise · United States · Remote

This role is for an Incident Response Analyst within CrowdStrike's CSIRT team, focusing on triaging and investigating security detections, developing detection criteria, and providing security reporting. It is part of the DoD SkillBridge program for active duty service members.

What you'd actually do

  1. Support Incident Response lifecycle via triage and investigation of detections and take action as appropriate (e.g. live response, containment, escalation, etc.)
  2. Develop detection criteria across a broad range of technologies and log sources
  3. Identify coverage and efficiency gaps in available data and tooling
  4. Provide information security reporting including security metrics as required
  5. Participate in incident response and manage escalations as needed

Skills

Required

  • Experience responding to security events, including front-line analysis and escalation, of hacktivist, cybercrime, and APT activity
  • Theoretical and practical knowledge with Mac, Linux, and Windows operating systems
  • Theoretical and practical knowledge with TCP/IP networking and application layers
  • Experience with access/application/system log analysis, IDS/IPS alerting and data flow, and SIEM-based workflows
  • Experience with security data collection, processing, and correlation
  • Capable of completing technical tasks without supervision
  • Desire to grow and expand both technical and soft skills
  • Strong project management skills
  • Contributing thought leader within the incident response industry
  • Ability to foster a positive work environment and attitude
  • Meets DoD SkillBridge Qualifications
  • Current Active Duty Service Member
  • Available to participate 90-180 days
  • This role is only open to US citizens and Green Card holders.
  • US Citizenship required due to direct work related to GovCloud

Nice to have

  • Scripting experience highly desirable (Python, Perl, Bash, Power Shell, etc.)
  • Experienced user of Splunk
  • Experience with host and network forensics
  • Experience with basic static and behavioral malware analysis
  • Previous project management experience desirable
  • Applicable security certifications (GCIA, GCIH, GCFA, GNFA, etc.)

What the JD emphasized

  • Meet DoD SkillBridge Qualifications
  • Current Active Duty Service Member
  • Available to participate 90-180 days
  • US Citizenship required due to direct work related to GovCloud