Analyst I, Falcon Complete GovCloud (Hybrid, St. Louis)

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role:

CrowdStrike Falcon® Complete GovCloud is looking for highly motivated, self-driven, technical analysts dedicated to making a difference in global security by protecting government organizations against the most advanced attackers in the world. Our Falcon Complete GovCloud virtual security operations center offers opportunities to expand your skill set through a wide variety of experiences, detecting and responding to incidents as they occur in real time for our government and public sector customers.

Analysts I operate exclusively within CrowdStrike's Federal Risk and Authorization Management Program (FedRAMP)-authorized GovCloud environment, supporting customers with heightened compliance, data sovereignty, and security requirements. This is the entry point into the Falcon Complete GovCloud analyst career path. At this level, you will apply intermediate-level cybersecurity and technical skills across incident handling, alert triage, security monitoring, threat detection, digital forensics, incident response management, and malware analysis, while building the advanced communication, analytical thinking, and problem-solving capabilities that define the Falcon Complete GovCloud standard of service.

This position is open to candidates in St. Louis, MO.

Am I a Falcon Complete GovCloud Analyst I Candidate?

• Do you find yourself interested in putting your hands-on technical skills to the test in detecting, containing, and remediating incidents within U.S. government and public sector environments?
• Are you self-motivated and looking for an opportunity to rapidly accelerate your skills while working within one of the most compliance-driven and mission-critical cybersecurity environments in the industry?
• Do you crave new and innovative work that directly supports the security of government organizations and the missions they serve?
• Do you have an incident response or information security background that you are not fully utilizing, particularly experience in or exposure to government, Department of War (DoW, formerly the Department of Defense), or intelligence community environments?
• Are you capable of communicating technical findings clearly to both technical teams and government customer management?
• Do you love working around mission-driven, smart people who you can learn from and mentor on a daily basis?
  

What You'll Do:

• Execute alert triage across the Falcon Complete GovCloud environment at an intermediate proficiency level, developing complete triage strategies, managing multiple alert sources, implementing comprehensive investigation procedures, and developing detailed documentation, all within FedRAMP authorization boundaries and applicable federal compliance requirements.
• Operate the CrowdStrike Falcon Sensor within the GovCloud environment at an intermediate proficiency level, configuring sophisticated monitoring parameters across environments, analyzing security event patterns to identify potential threats, and adapting sensor capabilities to meet the varied security requirements of government and public sector customers.
• Implement and manage security monitoring and detection within the GovCloud environment at an intermediate proficiency level, developing complete monitoring solutions, implementing complex detection methods, managing multiple security tools, and developing custom detection rules.
• Apply threat detection capabilities within the GovCloud environment at an intermediate proficiency level, demonstrating growing independence in applying threat detection across familiar scenarios in support of government and public sector customer protection.
• Conduct digital forensics in support of customer incident response at an intermediate proficiency level, developing complete forensic strategies, managing multiple evidence sources, implementing comprehensive documentation frameworks, and developing detailed reports.
• Execute incident response management across the full incident lifecycle at an intermediate proficiency level, developing complete response strategies, implementing complex containment methods, managing evidence collection, and managing cross-team coordination, aligned to NIST SP 800-61 (Computer Security Incident Handling Guide) and applicable federal incident response frameworks.
• Perform malware analysis in support of customer incident response at an intermediate proficiency level, contributing effectively to malware analysis projects and offering practical suggestions to inform containment decisions and remediation planning.
• Operate the CrowdStrike Falcon platform user interface within the GovCloud environment at an intermediate proficiency level, performing investigations and triage, applying filters, generating reports, and using threat graphs to support incident response workflows for government and public sector customers.
• Apply intermediate-level technical troubleshooting within the GovCloud environment, handling complex technical issues independently, performing thorough root cause analysis, identifying patterns in recurring issues, and implementing preventive measures to reduce recurrence.
• Apply intermediate-level Linux administration knowledge within the GovCloud environment, managing complex Linux environments independently, implementing advanced system configurations, implementing automation through shell scripting, and maintaining security hardening standards.
• Apply intermediate-level Windows systems administration knowledge within the GovCloud environment, managing complex Active Directory structures independently, implementing and maintaining Windows security features and compliance requirements, and troubleshooting complex system issues.
• Communicate effectively with government and public sector customer management and internal stakeholders at an advanced proficiency level, communicating complex ideas with exceptional clarity and authority, anticipating the needs and motivations of others, and adapting messaging to guide conversations toward desired outcomes.
• Deliver high-quality presentations of technical findings and recommendations at an advanced proficiency level, presenting complex or high-stakes topics with clarity, authority, and persuasion, and adjusting in real time based on audience cues and feedback.
• Apply advanced problem-solving to GovCloud operational challenges, developing innovative solutions to complex problems, anticipating problems before they arise, and evaluating long-term impacts and broader implications of solutions.
• Manage time and workload effectively across concurrent incident response assignments at an intermediate proficiency level, demonstrating confidence in prioritization and adjusting approach based on context and operational feedback.
• Contribute to CrowdStrike's industry thought leadership through blog posts, CrowdCasts, and other public-facing engagements, representing the Falcon Complete GovCloud team's expertise and mission focus.
  

What You'll Need:

Successful candidates will have experience in one or more of the following areas:

• Incident Handling: Experience conducting or managing incident response for organizations, investigating targeted threats including Advanced Persistent Threats (APT), Organized Crime, and Hacktivists, with preference for experience in or supporting government, DoW, or public sector environments. Demonstrated intermediate-level ability to develop complete triage strategies, implement complex analysis methods, and manage multiple alert sources independently.
• Computer Forensic Analysis: A background using a variety of forensic analysis tools in incident response investigations to determine the extent and scope of compromise. Intermediate-level ability to develop complete forensic strategies, implement complex analysis methods, manage multiple evidence sources, and produce detailed investigation reports within regulated or compliance-driven environments.
• Systems Administration: Intermediate-level understanding of system internals across Windows, Mac, and Linux platforms, including the ability to manage complex configurations, implement automation through scripting, handle complex troubleshooting scenarios, and maintain security hardening standards sufficient to execute countermeasures and remediation within a managed services context.
• Security Monitoring and Detection: Intermediate-level capability to develop complete monitoring solutions, implement complex detection methods, create effective alert workflows, manage multiple security tools, optimize detection accuracy, and develop custom detection rules within a security operations context.
• Network Forensic Analysis: Knowledge of network protocols and network analysis tools, with the ability to perform analysis of associated network logs to support incident scoping and attribution within the GovCloud environment.
• Malware Analysis: Intermediate-level ability to contribute effectively to malware analysis projects, applying static and dynamic techniques to understand the nature, behavior, and intent of malicious code encountered in customer environments.
• Incident Remediation: Understanding of targeted attack lifecycles with the ability to develop customized tactical and strategic remediation plans for compromised organizations, including those operating under federal compliance mandates.
• Network Operations and Architecture/Engineering: Understanding of secure network architecture and network operations, including familiarity with federal network security standards applicable to GovCloud environments.
• Programming/Scripting: Experience coding in one or more of the following: C, C#, VB, Python, Perl, Ruby on Rails, and .NET, applied to automation, tooling, or analysis support within a security operations context.
• Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.
  

Additional Qualifications:

All candidates must also demonstrate the following:

• Advanced analytical thinking capability, with demonstrated ability to optimize performance by redesigning or elevating analytical practices to improve incident response outcomes for government and public sector customers.
• Advanced communication capability, with demonstrated ability to communicate complex ideas with exceptional clarity and authority, anticipating the needs and motivations of others and adapting messaging accordingly.
• Advanced presentation capability, with demonstrated ability to present complex or high-stakes topics with clarity, authority, and persuasion to government and public sector customer management and internal stakeholders.
• Advanced problem-solving capability, with demonstrated ability to develop innovative solutions to complex problems, anticipate issues before they arise, and evaluate long-term impacts of solutions.
• Intermediate-level time management capability, with demonstrated confidence in prioritizing tasks, managing workload, and meeting deadlines while maintaining quality under pressure.
• Demonstrated desire to grow and expand both technical and soft skills, with a commitment to continuous professional development in the federal cybersecurity space.
• Strong organizational skills sufficient to manage concurrent incident response workstreams.
• Ability to foster a positive, collaborative work environment and maintain a professional attitude under pressure.
  

Education:

A Bachelor's or master's degree in Computer Science, Computer Engineering, Mathematics, Information Security, Information Assurance, Information Security Management, Intelligence Studies, Cybersecurity, Cybersecurity Policy, or a related field is preferred. Applicants without a degree but with relevant work experience, military service, and/or industry training and certifications will be considered.

#LI-RC2

This role may require the candidate to periodically undergo and pass alcohol and/or drug test(s) during the course of employment.This role will require the candidate to periodically undergo and pass additional background and fingerprint check(s) consistent with government customer requirements.

Benefits of Working at CrowdStrike:

• Market leader in compensation and equity awards
• Comprehensive physical and mental wellness programs
• Competitive vacation and holidays for recharge
• Paid parental and adoption leaves
• Professional development opportunities for all employees regardless of level or role
• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
• Vibrant office culture with world class amenities
• Great Place to Work Certified™ across the globe

CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.

CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements.

If you need assistance accessing or reviewing this website, submitting an application, requesting an accommodation, or providing feedback on the job posting, please contact us at recruiting@crowdstrike.com.

Find out more about your rights as an applicant.

CrowdStrike participates in the E-Verify program.

Notice of E-Verify Participation

Right to Work

CrowdStrike, Inc. is committed to fair and equitable compensation practices. Placement within the pay range is dependent on a variety of factors including, but not limited to, relevant work experience, skills, certifications, job level, supervisory status, and location. The base salary range for this position for all U.S. candidates is $85,000 - $120,000 per year, with eligibility for bonuses, equity grants and a comprehensive benefits package that includes health insurance, 401k and paid time off.

For detailed information about the U.S. benefits package, please click here.

Expected Close Date of Job Posting is:01-01-2027