Sr. Analyst, Falcon Complete (Remote)

Role overview Lead complex security investigations for customers facing serious or sophisticated threats. The role spans endpoint, identity, email, network, and cloud environments, combining deep technical analysis with customer guidance, incident remediation, analyst mentorship, and improvements to response processes and tooling.

Responsibilities - Lead high-severity investigations, determine the cause and scope of compromise, and identify attacker techniques using endpoint telemetry, forensic evidence, and network data. - Investigate advanced Microsoft 365 incidents, including business email compromise and adversary-in-the-middle attacks, and advise customers on response. - Analyze malware through static and dynamic methods to understand behavior and inform indicators, detection, and remediation. - Develop and coordinate targeted remediation plans, including containment actions involving third-party platforms. - Guide customers through escalations and communicate findings clearly during time-sensitive incidents. - Mentor analysts, improve response procedures, create training and knowledge materials, and develop automation for investigation and response.

Requirements - Extensive incident response or information security experience, including the ability to independently lead complex investigations and act as a subject matter expert. - Strong technical investigation skills across security telemetry, forensic artifacts, malware, and enterprise environments. - Ability to mentor colleagues, manage improvement initiatives to completion, and contribute to the incident response community. - Project coordination skills and a constructive, collaborative approach under pressure. - Willingness to work a four-day, ten-hour schedule that includes one weekend day. - A relevant bachelor's or master's degree is listed; equivalent work experience or training may also be considered.

Nice to have - Scripting experience with Python, PowerShell, or Bash for investigative tools, remediation workflows, or detection improvements. - Experience with AI models, MCP servers, agent frameworks, prompt development, or applying AI to security operations. - Experience sharing expertise through industry writing, talks, or other public contributions.

Benefits and work setup - The position is remote. The listing gives a U.S. base salary range of $125,000–$180,000, with potential bonus, equity, health coverage, retirement savings, paid time off, parental leave, and professional development.