Sr. Threat Hunting Analyst (Remote, AUS)

Company: CrowdStrike
Company: CrowdStrike
Location: Australia - Remote, VC
Commitment: Full time
Posted on: 2023-12-02 05:28
​​#WeAreCrowdStrike and our mission is to stop breaches. As a global leader in cybersecurity, our team changed the game. Since our inception, our market leading cloud-native platform has offered unparalleled protection against the most sophisticated cyberattacks. We’re looking for people with limitless passion, a relentless focus on innovation and a fanatical commitment to the customer to join us in shaping the future of cybersecurity. Consistently recognized as a top workplace, CrowdStrike is committed to cultivating an inclusive, remote-first culture that offers people the autonomy and flexibility to balance the needs of work and life while taking their career to the next level. Interested in working for a company that sets the standard and leads with integrity? Join us on a mission that matters - one team, one fight.About The Role: The CrowdStrike OverWatch Elite team is seeking a customer-centric individual, proficient in endpoint threat hunting, to act as a trusted advisor and resource to OverWatch Elite’s managed threat hunting customers.OverWatch Elite Analysts act as a customer engagement add-on to the Falcon OverWatch managed threat hunting service by collaborating with clients, empowering them to act to threats with speed and confidence. On a daily basis, the OverWatch Elite Analysts develops a meaningful partnership with the client by exchanging threat intelligence with clients, providing threat briefings to diverse audiences, drafting communication around threat detections, performing hypothesis & statistical driven hunts, leading customer meetings, and acting as liaison between customers and threat hunting teams.  Analysts spend 40%-50% of their time threat hunting and 50%-60% of their time engaging with clients on emerging threats, hunting operations, presenting threat intelligence, and what OverWatch and the Intelligence Team is seeing in the threat landscape.The OverWatch Elite team delivers a ‘White Glove’ service to augment Intelligence and OverWatch threat hunting and provides a personal consultative threat response experience to customers that want to engage with proactive, professional, helpful threat hunters. To succeed as an OverWatch Elite Analyst you must be an adaptable team-player who loves learning. You must be proficient with threat hunting operations and possess the technical problem-solving skills that enable our customers to stop breaches. Customer service skills are critical to this role’s success.For this position, we’re looking for someone to work AEDT/AEST working hours with occasional on-call duties.  This position will also require the ability to cover one weekend day (Sat or Sun) each week.This role will require the candidate to periodically undergo and pass additional background and fingerprint check(s) consistent with government customer requirements. What You’ll Do:Develop high-quality customer deliverables that meet the expectations of the service OverWatch Elite provides its customers. This includes:Hunting for threats, anomalies and cyber-related disruptions on customer endpointsPerforming threat analysis, deep-dives and incident assessmentsResearching and assessing customer’s threats and IOCsConducting ongoing customer environment assessmentsHolding monthly/quarterly customer touchpointsConducting research and presenting to clientsProvide subject matter expertise and insight to clients about industry attack trends and defenses by developing and maintaining thorough awareness and understanding of evolving threats, adversaries and intrusion trendsDevelopment and delivery of high-quality threat briefings, reporting and presentations to customers by providing actionable intelligenceCollaborate with interdepartmental teams to help detect new, interesting or unique threats and mitigations based on hunting observationsBuild advisory relationships with customers and continuously exceeding client expectationsGuide clients through Threat Response findings, Threat Intelligence assessments, and provide subject matter expertise for response activitiesGather client input and feedback across customer base to influence service roadmapsLead team projectsWhat You’ll Need:Trustworthy, good communicator, collaborative, dependable, and driven personalityFive (5) years or more in the industry as job experienceThree (3) or more years of significant client-facing relationship management experiencePrior cyber experience in three (3) or more of the following:Threat responseIntrusion analysisEndpoint incident response (MAC, Linux, and/or Windows)Malware analysisPenetration testingThreat huntingInformation security consultingIntelligenceExcellent verbal and written communication skillsProven track record of tailoring communication to a wide range of stakeholders from Security Analysts to CIOsFamiliarity with all source threat intelligence and the intelligence cycleProven ability to convey extremely technical concepts to audiences with varying technical prowessExperience with big-data processing tools such as Splunk, Humio, Logstash, Kibana, etc.Understanding of MITRE ATT&CK techniques / sub-techniquesBonus Points:Strong knowledge with big-data processing tools such as Splunk, Humio, Logstash, Kibana, etc.Solid understanding of MITRE ATT&CK techniques / sub-techniques and ability to articulate TTPs to customersKnowledge of customer management systems such as Salesforce and JiraLI-BS1 LI-RemoteBenefits of Working at CrowdStrike:Remote-first cultureMarket leader in compensation and equity awardsCompetitive vacation and flexible working arrangements Comprehensive and inclusive health benefitsPhysical and mental wellness programsPaid parental leave, including adoption A variety of professional development and mentorship opportunitiesOffices with stocked kitchens when you need to fuel innovation and collaborationWe are committed to fostering a culture of belonging where everyone feels seen, heard, valued for who they are and empowered to succeed. Our approach to cultivating a diverse, equitable, and inclusive culture is rooted in listening, learning and collective action. By embracing the diversity of our people, we achieve our best work and fuel innovation - generating the best possible outcomes for our customers and the communities they serve.CrowdStrike is committed to maintaining an environment of Equal Opportunity and Affirmative Action. If you need reasonable accommodation to access the information provided on this website, please contact Recruiting@crowdstrike.com​, for further assistance.CrowdStrike participates in the E-Verify program. Notice of E-Verify ParticipationRight to Work
View Original Job Posting