Analyst I, Falcon Complete (Hybrid, San Antonio)

Overview

Analyst I, Falcon Complete investigates and responds to security incidents across endpoint, identity, email, network, and cloud environments for customers.

What you'll do

• Triage and investigate security detections across enterprise environments.
• Analyze EDR telemetry, logs, and forensic artifacts to determine compromise scope.
• Investigate Microsoft 365 incidents, including BEC and AITM attacks.
• Perform basic static and dynamic malware analysis.
• Develop incident detection and countermeasure processes.
• Communicate incident findings and recommendations to customers and internal teams.

What you'll need

• Experience in incident handling, threat analysis, forensics, malware analysis, or related security areas.
• Working knowledge of attack vectors, threat actor TTPs, and MITRE ATT&CK.
• Understanding of Windows, Mac, and/or Linux operating systems.
• Experience with identity platforms such as Okta, Microsoft Entra ID, or Active Directory.
• Experience analyzing logs and network traffic within enterprise or SIEM environments.
• Experience with Python, PowerShell, or Bash scripting.
• BA/BS or MA/MS degree in a relevant field, or relevant work experience and/or training.

Details

• Work schedule: 4x10, including one weekend day.
• Salary: $85,000–$120,000 per year, with eligibility for bonuses and equity grants.
• Location line: USA - Remote.
• The role is open to candidates in San Antonio, Texas.