Internal Investigations Analyst

March 21

Apply Now

Receive Emails with Similar Jobs

CrowdStrike

WebsiteLinkedInAll Job Openings

CrowdStrike is a cybersecurity company that provides cloud-based security services to stop breaches. It is recognized as a leader in endpoint protection, identity and cloud security, and managed detection and response. CrowdStrike's platform, Falcon, integrates artificial intelligence to offer real-time visibility, detection, and protection against sophisticated cyber threats. The company is lauded for its effectiveness in securing networks and data, making it a trusted partner for businesses worldwide.

Next-Generation Endpoint Protection • Endpoint Detection and Response • Next Generation Anti-Virus • Managed Threat Hunting • Incident Response

5001 - 10000 employees

Founded 2011

🔒 Cybersecurity

☁️ SaaS

🤖 Artificial Intelligence

📋 Description

• Participate in confidential insider risk investigations • Create and implement insider risk related detections • Perform detailed and comprehensive investigations, reviewing data from multiple data sources to include, but not limited to, network, host, and open source • Communicate with end users regarding potential policy violations when appropriate • Assist in data recovery efforts through the creation of comprehensive intelligence reports on an as-needed basis • Provide senior leadership and executive level staff with complex information in a clear and concise manner regarding active investigations on an as-needed basis • Handling confidential or sensitive information with appropriate discretion • Assist in regular and sustained alert tuning efforts to minimize false positive results • Ensure that all investigations are properly documented and tracked in appropriate case management systems • Support Incident Response lifecycle via triage and investigation of detections and action as appropriate (e.g. live response, containment, escalation, etc.) • Develop detection criteria across a broad range of technologies and log sources • Identify coverage and efficiency gaps in available data and tooling • Provide information security reporting including security metrics as required • Participate in incident response and manage escalations as needed • Provide after-hours support on an on-demand basis • Drive efficient process development and documentation for all aspects of the Incident Response lifecycle

🎯 Requirements

• Meets DoD SkillBridge Qualifications • Current Active Duty Service Member • Available to participate 90-180 days • This role is only open to US citizens and Green Card holders