SkillBridge Incident Response Analyst (Remote)

Company: CrowdStrike
Company: CrowdStrike
Location: USA - Remote
Commitment: Full time
Posted on: 2024-04-03 05:36
​​#WeAreCrowdStrike and our mission is to stop breaches. As a global leader in cybersecurity, our team changed the game. Since our inception, our market leading cloud-native platform has offered unparalleled protection against the most sophisticated cyberattacks. We’re looking for people with limitless passion, a relentless focus on innovation and a fanatical commitment to the customer to join us in shaping the future of cybersecurity. Consistently recognized as a top workplace, CrowdStrike is committed to cultivating an inclusive, remote-first culture that offers people the autonomy and flexibility to balance the needs of work and life while taking their career to the next level. Interested in working for a company that sets the standard and leads with integrity? Join us on a mission that matters - one team, one fight.About the Role:This Job Description is for DoD SkillBridge participation and is not eligible for direct hire.CrowdStrike is looking for a highly motivated, self-driven Incident Response Analyst to support the Incident Response lifecycle via triage and investigation of detections and take action as appropriate (e.g. live response, containment, escalation, etc). This role is within our CSIRT team and is a remote position available to qualifying service members currently residing in the US.CrowdStrike’s DoD SkillBridge / Career Skills Program (CSP) Internship is an approved SkillBridge Program under Dept. of Defense Instruction 1322.29 as enacted by 10 U.S.C. Sec 1143. Eligibility is restricted to members of the U.S. Armed Forces separating honorably with greater than 180 days of continuous Active Duty. SkillBridge/CSP period of eligibility is within the final 180 days of Active Duty service, and the SkillBridge/CSP must be completed prior to separation from Active Duty in the U.S. Armed Forces. CrowdStrike’s DoD SkillBridge/CSP Internship is open to members of all services, and all ranks and experience levels. Service members should fully review SkillBridge/CSP Job Description for requirements and qualifications of the individual position.SkillBridge participants participate in full time training with industry (40-hour work week) under permissive temporary duty military orders and are not eligible for compensation from CrowdStrike during SkillBridge participation, but will continue to receive all military wages and benefits as defined by the Department of Defense.DoD SkillBridge/CSP is fully compliant with FLSA, DBA, SCA, CSHSSA and all other pertinent Federal and State labor laws. For more employer information regarding DoD SkillBridge/CSP, please visit the Department of Defense DoD SkillBridge website at https://skillbridge.osd.mil/What You’ll Do:Support Incident Response lifecycle via triage and investigation of detections and take action as appropriate (e.g. live response, containment, escalation, etc.)Develop detection criteria across a broad range of technologies and log sourcesIdentify coverage and efficiency gaps in available data and toolingProvide information security reporting including security metrics as requiredParticipate in incident response and manage escalations as neededProvide after-hours support on an on-demand basisDrive efficient process development and documentation for all aspects of the Incident Response lifecycleWhat You’ll Need:DoD 8570 requirements (i.e. IAT Level II/III, CSSP Incident Responder)Experience responding to cybersecurity / information security events, including front-line analysis and escalation, of hacktivist, cybercrime, and APT activityTheoretical and practical knowledge with Mac, Linux, and Windows operating systemsTheoretical and practical knowledge with TCP/IP networking and application layersExperience with access/application/system log analysis, IDS/IPS alerting and data flow, and SIEM-based workflowsExperience with security data collection, processing, and correlationAdditionally, all candidates must possess the following qualifications:Capable of completing technical tasks without supervisionDesire to grow and expand both technical and soft skillsStrong project management skillsContributing thought leader within the incident response industryAbility to foster a positive work environment and attitudeRequirements:Meets DoD SkillBridge QualificationsCurrent Active Duty Service MemberAvailable to participate 90-180 daysThis role is only open to US citizens and Green Card holders. Preferred Skills:Scripting experience highly desirable (Python, Perl, Bash, Power Shell, etc.)Experienced user of SplunkExperience with host and network forensicsExperience with basic static and behavioral malware analysisPrevious project management experience desirableEducation:Pursuing an undergraduate degree or direct experience in information security, information systems, or computer scienceApplicable security certifications (GCIA, GCIH, GCFA, GNFA, etc.)US Citizenship required due to direct work related to GovCloud#LI-AM2#LI-RemoteWe are committed to fostering a culture of belonging where everyone feels seen, heard, valued for who they are and empowered to succeed. Our approach to cultivating a diverse, equitable, and inclusive culture is rooted in listening, learning and collective action. By embracing the diversity of our people, we achieve our best work and fuel innovation - generating the best possible outcomes for our customers and the communities they serve.CrowdStrike is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.
View Original Job Posting