Threat Analyst, CrowdStrike

• Exposure and understanding of different types and functionality of malware
• Experience with reverse engineering malware, or malware operations
• Knowledge of programming and scripting languages, in particular Python
• Fundamental understanding of attributes of binary files such as imports/exports and packers
• Ability to demonstrate practical knowledge of research/collection skills and analytical methods
• General understanding of threat/risk management and threat/risk assessment
• Familiarity with various operating systems
• Ability to break down complex problems into workable components
• BA/BS or MA/MS degree or equivalent experience in Computer Science, Information Security, or a related field

Desirable

• Our CrowdStrike Data Science Machine Learning Operations and Response Team is looking for a Threat Analyst who is both customer- and team-focused
• This role will include both response and pro-active aspects
• This role will be perfect for anyone who has experience involving detections and/or reverse engineering
• The primary responsibility of this role will be toanalyze malware and detections by investigating individual customer detection tickets
• This team is focused on improving detection capability and efficiency through analysis of malware or other threat detections impacting our customer base
• Experience with detections of potentially malicious behavior by machine learning models is a plus
• Our goal for the team is to both help internal teams respond to customer-inquiries about threat detection and to provide information about the effects of our detections into the Data Science organization - including detection efficacy and managing false positive detections
• This role will work most closely with internal teams such as Technical Account Managers, Falcon Complete, Data Scientists and the Malware Research Center in Data Science
• Review current product detections to ensure they are performing to the company standard
• Perform tasks to enable better-management of false positive detections
• Analyze binary files to determine their legitimacy
• Address internal questions and concerns regarding customer threat detections