C

CrowdStrike

Builds cloud software that stops cyberattacks

Analyst 1 – Falcon Complete Govcloud

Full-TimeUpdated on 10/23/2026
$85k - $120k/yr+ Bonus + Equity grants
Mid
Bachelor's, Master's
St. Louis, MO, USA
HybridHybrid/on-site schedule required; role is open to candidates in St. Louis, MO.
CybersecuritySecurity Operations & Incident Response
Company Historically Provides H1B Sponsorship

About the job

Requirements
  • Candidates must have experience in at least one of incident handling, threat landscape awareness, computer forensic analysis, malware analysis, operating system fundamentals, systems administration, network analysis, identity platforms, email security, third-party log analysis, incident remediation, network operations and architecture/engineering, programming or scripting, or AI fundamentals.
  • Incident handling experience includes conducting and coordinating incident response across security events, managing simultaneous incidents across hosts and customer environments, and investigating host or user compromises, network breaches, organized crime, and advanced persistent threats.
  • Threat landscape knowledge includes attack vectors and threat actor tactics, techniques, and procedures, with demonstrated use of frameworks such as MITRE ATT&CK in active investigations.
  • Computer forensic analysis experience includes using forensic tools in incident response investigations to determine the extent and scope of compromise.
  • Malware analysis experience includes performing basic static and dynamic analysis to understand malicious code behavior.
  • Operating system knowledge must include Windows, Mac, and/or Linux, with emphasis on Windows internals such as the file system, registry, scheduled tasks, and running processes.
  • Systems administration experience includes administering networks and resolving connectivity, authentication, and configuration issues across enterprise environments.
  • Network analysis knowledge includes network protocols and analysis tools, and experience analyzing network traffic in incident investigations.
  • Identity platform experience includes tools such as Okta, Microsoft Entra ID, Active Directory, and similar enterprise technologies.
  • Email security experience includes investigating Microsoft 365 incidents, including business email compromise and adversary-in-the-middle attacks.
  • Third-party log analysis knowledge includes cloud platforms, network devices, identity providers, email platforms, and other enterprise technologies, with investigation and triage experience in a SIEM platform.
  • Incident remediation knowledge includes containment actions for compromised hosts and third-party platforms.
  • Network operations and architecture/engineering knowledge includes secure network architecture and troubleshooting and navigating network environments.
  • Programming or scripting experience may include Python, PowerShell, or Bash for investigation workflows or automation.
  • AI experience includes using AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes.
  • Candidates must be capable of completing technical tasks without supervision.
  • Candidates must be willing to work a 4x10 schedule, including one weekend day.
  • Candidates must be willing to work on site on a hybrid schedule.
  • Candidates must hold a BA or BS, or an MA or MS, in Computer Science, Computer Engineering, Mathematics, Information Security, Information Assurance, Information Security Management, Intelligence Studies, Cybersecurity, Cybersecurity Policy, or a related field; applicants without a degree may be considered with relevant work experience and/or training.
  • The role may require candidates to periodically undergo and pass alcohol and/or drug tests during employment.
Responsibilities
  • Triage, investigate, and respond to security detections across endpoint, identity, email, network, and cloud environments.
  • Analyze EDR telemetry, log sources, and forensic artifacts to determine the root cause and scope of compromise and develop targeted remediation recommendations.
  • Investigate suspicious Microsoft 365 activity, including business email compromise and adversary-in-the-middle attacks, contain threats, and provide actionable customer guidance.
  • Perform basic malware analysis to support security incident investigation and triage.
  • Develop and improve incident detection processes and countermeasure execution.
  • Serve as the primary customer point of contact during incident response activities and deliver clear, concise, and professional communications.
  • Produce written and verbal communications, recommendations, and findings for customers and internal stakeholders.

About the company

CrowdStrike builds cybersecurity software for organizations that need to protect computers, cloud workloads, identities and data from digital attacks. Its Falcon platform combines these defenses in one cloud system, using a lightweight sensor on devices to collect activity and detect suspicious behavior. Security teams investigate alerts and automate responses through a shared console, while the platform connects information from different parts of a business to reveal attacks that isolated tools miss. Customers pay subscription fees based on the products and assets covered, and CrowdStrike also charges for incident response services. CrowdStrike was founded in 2011 and is based in Austin, Texas.

Company Size

10,001+

Company Stage

IPO

Headquarters

Austin, Texas

Founded

2011

Get referred to CrowdStrike

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Subscription value grew: CrowdStrike's annual recurring revenue reached $5.84 billion, up 25%, for July 2026.
  • Most employees have location flexibility: CrowdStrike designs remote and hybrid teams to work across rooms and time zones.
  • Consulting distribution expands: Wipro launched a Falcon-powered security command center in September 2026.

What critics are saying

  • Staff stability depends on renewals: CrowdStrike flags underused Falcon Flex subscriptions as a reason customers reduce commitments.
  • Outage litigation remains unresolved: CrowdStrike disclosed ongoing Delta discovery and unquantifiable legal losses in August 2026.
  • Premium subscriptions face price pressure: CrowdStrike warns rivals bundle competing security features into products customers already use.

What makes CrowdStrike unique

  • Security spending moves between tools: Falcon Flex lets customers swap modules within a committed subscription budget.
  • CrowdStrike backs managed protection financially: eligible Falcon Complete customers receive up to $2 million in ransomware expense coverage.
  • Human hunters inherit broad visibility: CrowdStrike's OverWatch searches security events from more than 325 data sources.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Competitive Employee Stock Purchase Plan
  • Remote-friendly culture
  • Market leader in compensation and equity awards
  • Competitive vacation and flexible working arrangements
  • Comprehensive health benefits + 401k plan
  • Paid Parental Leave, including adoption
  • Wellness programs
  • Professional development and mentorship opportunities
  • Open offices have stocked kitchens, coffee, soda and treats

Growth & Insights and Company News

6 month growth

1%

1 year growth

2%

2 year growth

2%
U.S. Securities and Exchange Commission
Oct 25th, 2026
EDGAR Filing Documents for 0001852826-21-000003

EIN.: 611897507 | State of Incorp.: DE | Fiscal Year End: 1231Type: D | Act: 33 | File No.: 021-405568 | Film No.: 211079595

Yahoo Finance
Oct 24th, 2026
CrowdStrike jumps 8% to $257.57 as CEO warns PHP flaws will trigger a wave of breaches

CrowdStrike shares rose 8.25% to $257.57 on Friday, October 23, 2026, after chief executive George Kurtz warned of a surge in breaches. He said newly disclosed flaws in PHP, the language behind nearly 70% of websites, will lead to "a lot of breaches happening in the coming months." Palo Alto Networks gained 7.22% to $380.55. Okta rose 5.82% and Datadog gained 4.62%. The US federal cyber agency's October 21 alert covered two critical PHP flaws that let unauthenticated attackers run code remotely on web servers. Its October 23 revision reported no observed exploitation in the wild. Kurtz said tens of millions of servers are exposed. He named no company at risk and gave no figure for damage.

Yahoo Finance
Oct 22nd, 2026
Cybersecurity stocks to watch in October 2026: CrowdStrike, Netskope and Tyler Technologies

Simply Wall St has named three cybersecurity stocks from a screener that favours stronger balance sheets. Serious flaws found in PHP this year have pushed governments and companies to take websites offline and rush out fixes. Netskope (NTSK) has a market value of $8.1 billion and about $802.6 million in revenue. Its cloud-native platform secures web, cloud, and software-as-a-service traffic. CrowdStrike Holdings (CRWD) is valued at $233.3 billion, with about $5.4 billion in revenue. Its Falcon Flex subscription model aims to speed up module adoption and deepen customer commitment. Tyler Technologies is valued at $15.4 billion. It earns about $1.8 billion from enterprise software and $621 million from platform technologies, almost all from US public sector clients. The full screen found 30 more companies.

Yahoo Finance
Oct 22nd, 2026
Arista vs CrowdStrike: $10.5B revenue and 38% margin face off against faster-valued cybersecurity growth

Arista Networks and CrowdStrike offer different ways to bet on enterprise infrastructure, one in networking hardware and the other in cybersecurity software. A Motley Fool analyst favours CrowdStrike for long-term growth. Arista's trailing 12-month revenue reached $10.5 billion, up about 33%, with net income of $4 billion and free cash flow near $5.1 billion. CrowdStrike's revenue was nearly $5.4 billion, up about 24%, with net income of roughly $38 million and free cash flow near $1.6 billion. CrowdStrike trades at a forward price-to-earnings ratio of 182.0x, against 44.5x for Arista. Its price-to-sales ratio is 43.3x, against 21.9x. CrowdStrike expects annualised revenue to nearly double to $10 billion by 2030. Arista faces growing competition from Nvidia.

Yahoo Finance
Oct 19th, 2026
QIZ launches cryptography posture management platform on CrowdStrike Marketplace

QIZ Security's Cryptography Posture Management platform is now available for purchase on the CrowdStrike Marketplace, the company announced on October 19, 2026. The platform shows organisations where their cryptography is weak or non-compliant, helping teams prioritise fixes and prepare for post-quantum cryptography (PQC). It flags vulnerable TLS and SSH configurations, expiring certificates, and quantum-vulnerable algorithms without needing another endpoint agent. QIZ links these findings to host, application, and infrastructure context to identify root causes and owners. "Availability through the CrowdStrike Marketplace makes it easier for customers to adopt these capabilities through an ecosystem they already trust," said Ben Volkow, chief executive officer and co-founder of QIZ Security.