Cybersecurity Incident Response Analyst

Protect global organizations remotely from British Columbia or Alberta using incident response and endpoint security expertise. Work within PST or MST time zones.
As an Analyst I on Crowd Strike’s Falcon Complete team, you will detect and respond to customer incidents in real time. The virtual security operations center covers endpoint, identity, email, network, and cloud environments. Your work includes EDR telemetry, forensic artifacts, Microsoft 365 investigations, malware analysis, and customer communications.

Key Responsibilities:

Triage, investigate, and respond to security detections
Analyze EDR telemetry, logs, and forensic artifacts
Investigate Microsoft 365 BEC and AITM activity
Perform basic static and dynamic malware analysis
Deliver clear customer recommendations and findings
Requirements:
Incident response or information security experience
Knowledge of MITRE ATT&CK and threat actor TTPs
Understanding of Windows, Mac, or Linux systems

Experience with SIEM, identity, email, and network analysis
Willingness to work four ten-hour shifts, including weekends
Apply technical investigation, remediation, communication, and AI capabilities as a Crowd Strike Falcon Complete cybersecurity analyst.