[Remote] Incident Response Analyst - SkillBridge (Remote)
Note: The job is a remote job and is open to candidates in USA. CrowdStrike is a global leader in cybersecurity, dedicated to stopping breaches with an advanced AI-native platform. They are seeking a highly motivated Incident Response Analyst to support the Incident Response lifecycle through triage, investigation, and appropriate action on detections.
Responsibilities
- Support Incident Response lifecycle via triage and investigation of detections and take action as appropriate (e.g. live response, containment, escalation, etc.)
- Develop detection criteria across a broad range of technologies and log sources
- Identify coverage and efficiency gaps in available data and tooling
- Provide information security reporting including security metrics as required
- Participate in incident response and manage escalations as needed
- Provide after-hours support on an on-demand basis
- Drive efficient process development and documentation for all aspects of the Incident Response lifecycle
Skills
- Experience responding to security events, including front-line analysis and escalation, of hacktivist, cybercrime, and APT activity
- Theoretical and practical knowledge with Mac, Linux, and Windows operating systems
- Theoretical and practical knowledge with TCP/IP networking and application layers
- Experience with access/application/system log analysis, IDS/IPS alerting and data flow, and SIEM-based workflows
- Experience with security data collection, processing, and correlation
- Capable of completing technical tasks without supervision
- Desire to grow and expand both technical and soft skills
- Strong project management skills
- Contributing thought leader within the incident response industry
- Ability to foster a positive work environment and attitude
- Meets DoD SkillBridge Qualifications
- Current Active Duty Service Member
- Available to participate 90-180 days
- This role is only open to US citizens and Green Card holders
- Pursuing an undergraduate degree or direct experience in information security, information systems, or computer science
- Applicable security certifications (GCIA, GCIH, GCFA, GNFA, etc.)
- US Citizenship required due to direct work related to GovCloud
- Scripting experience highly desirable (Python, Perl, Bash, Power Shell, etc.)
- Experienced user of Splunk
- Experience with host and network forensics
- Experience with basic static and behavioral malware analysis
- Previous project management experience desirable
Benefits
- SkillBridge participants participate in full time training with industry (40-hour work week) under permissive temporary duty military orders and are not eligible for compensation from CrowdStrike during SkillBridge participation, but will continue to receive all military wages and benefits as defined by the Department of Defense.
Company Overview