CrowdStrike
CrowdStrike
CrowdStrike is a cybersecurity and SaaS company founded in 2011 that develops cloud-based tools for protecting endpoints, identities, networks, and cloud environments. Its Falcon platform combines artificial intelligence with real-time visibility, threat detection, and response capabilities to help organizations identify and stop sophisticated cyberattacks. CrowdStrike’s work spans cybersecurity, managed detection and response, and applied AI, supporting businesses seeking to strengthen the security of their systems and data.

Threat Analyst, Machine Learning Detection Efficacy

Assess malware and customer detection reports to help improve CrowdStrike’s machine learning detections. Support false-positive management and share efficacy findings with internal teams.

Description

  • Review detection data and customer reports to identify opportunities to improve machine learning models.
  • Support processes for managing false-positive detections.
  • Examine binary files to assess whether they are legitimate.
  • Evaluate product detections against company standards.
  • Respond to internal questions about customer threat detections.
  • Help internal teams address customer questions about threat detection.
  • Share detection efficacy and false-positive management findings with the Data Science organization.
  • Collaborate with Technical Account Managers, Falcon Complete, Data Scientists, and the Malware Research Center in Data Science.

Requirements

  • Understanding of malware types and how they work.
  • Experience with malware reverse engineering or malware operations.
  • Knowledge of programming and scripting languages, especially Python.
  • Fundamental understanding of binary file attributes such as imports, exports, and packers.
  • Practical research, information collection, and analytical skills.
  • General understanding of threat and risk management and assessment.
  • Familiarity with different operating systems.
  • Ability to break complex problems into manageable parts.
  • Experience using AI technologies to inform decisions, streamline workflows and processes, improve efficiency, and achieve business outcomes.
  • Experience responding to incidents in a security operations center or a similar environment.
  • Thorough understanding of Windows internals and the Windows API.
  • Knowledge of macOS and/or Linux.
  • Familiarity with tools used in targeted and criminal cyber intrusions.
  • Background in exploit and vulnerability analysis.
  • Knowledge of programming languages including C, C++, Java, and assembly.
  • Experience with machine learning-based threat detections.

Benefits

  • Compensation and equity awards described as market-leading.
  • Physical and mental wellness programs.
  • Vacation and holidays.
  • Paid parental and adoption leave.
  • Professional development opportunities for employees at every level and in every role.
  • Employee networks, local neighborhood groups, and volunteer opportunities.
  • Office culture with amenities.
  • Bonuses.
  • Equity grants.
  • Health insurance.
  • 401(k).
  • Paid time off.

Related Jobs