Job Information
CrowdStrike, Inc. Sr. Threat Response Specialist, Email Security - Falcon Complete (Remote) in Kirkland, Washington
CrowdStrike, Inc. Full time R19902 About the Role: We are seeking a highly skilled and experienced Senior Threat Response Specialist to join our Falcon Complete Managed Detection and Response (MDR) team. The successful candidate will focus on enabling and supporting our security analysts with specialized knowledge of email security solutions. As a Senior Threat Response Specialist, you will play a crucial role in enhancing our detection and response capabilities, providing expert guidance on email security issues, and ensuring our team is equipped to handle email-based threats effectively. What You'll Do:
Expert Support: Serve as the go-to expert on email security within the Falcon Complete team, providing guidance and support to security analysts on email-related issues. Collaborate with security analysts during incident investigations, providing expert insight into email-specific threat vectors and remediation strategies.
Response Playbooks: Curate knowledge base of investigation and remediation strategies for email security gateways and technologies. Drive development for SOAR automation and human led response actions.
Threat Detection Enablement: Assist in developing and fine-tuning detection mechanisms and use cases for email security solutions, leveraging email gateways message trace and security telemetry.
Knowledge Sharing: Educate and mentor security analysts on email security solution best practices, emerging threats, and effective response techniques.
What You'll Need:
Experience: Minimum of 5 years of experience in email security, with at least 3 years focused on supporting Incident Response, Security Operations or MDR teams.
Advanced proficiency with email security solutions (i.e. ProofPoint, Mimecast, Abnormal, Sublime Security, etc).
Deep understanding of email attack vectors and investigating them at the email layer (i.e., phishing, credential harvesting, business email compromise).
Experience with SIEM and SOAR technologies.
Knowledge of automation tools and scripting languages (e.g., Python, PowerShell).
#LI-Remote
#LI-JC3
CrowdStrike is proud to be an equal opportunity and affirmative action employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. Our approach to cultivating a diverse, equitable, and inclusive culture is rooted in listening, learning and collective action. By embracing the diversity of our people, we achieve our best work and fuel innovation - generating the best possible outcomes for our customers and the communities they serve.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at [recruiting@crowdstrike.com]{target="_blank" rel="noopener noreferrer"} for further assistance.
Find out more about your rights as an applicant.{target="_blank" rel="noopener noreferrer"}
CrowdStrike participates in the E-Verify program.
Notice of E-Verify Participation{target="_blank" rel="noopener noreferrer"}