Senior Intelligence Analyst - Iran Mission

About CrowdStrike

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We’re also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About The Role

CrowdStrike Intelligence, a core component of CrowdStrike Counter Adversary Operations, is seeking a Senior Intelligence Analyst - Iran Mission for its Global Threat Analysis Cell (GTAC) to focus on targeted intrusion activity related to Iran-nexus adversaries. This position will be primarily focused on tracking known adversaries and other cyber operations believed to emanate from Iran, as well as identifying and tracking trends associated with these operations. The Senior Intelligence Analyst - Iran Mission will be required to research and report on cyber operations at both the strategic and tactical level as part of a close-knit team where collaboration is a critical driver for mission success. This position is instrumental in providing unique insight into adversary operations through finished Intelligence products used by CrowdStrike customers and stakeholders.

What You'll Do

• Proactively identify and track targeted intrusion cyber threats, trends, and new developments by Iran-nexus adversaries through analysis of raw intelligence and data
• Apply analytic tradecraft to gathered intelligence in a consistent manner
• Proactively identify and track adversary network infrastructure
• Hunt for and perform basic triage of malicious file samples
• Perform intrusion and attribution analysis
• Provide finished intelligence analysis to internal and external customers through written reporting, in varying predetermined suspense and depth, with minimal supervision
• Collaborate across teams to inform various functions within CrowdStrike Intelligence about activity of interest and to coordinate adversary/campaign tracking
• Identify intelligence gaps and submit requests for information to fill gaps
• Provide peer review of proposed/draft reporting to team members and analytic uplift to team members
• Prioritize, categorize, and respond to requests for information from internal and external customers
• Conduct briefings as needed for a variety of levels of customers as requested (via video conference, webcast, in-person briefing, or industry conference)

What You'll Need

• Motivated self-starter with 5+ years’ experience in a threat intelligence and cybersecurity environment, with a focus on state-nexus cyber operations
• Comprehensive, practical knowledge of research/collection tradecraft and analytical methods—to include intrusion analysis
• Strong analytic writing skills, particularly the ability to produce quality finished intelligence products on short deadlines as well as continuing to maintain analysis for, and report on, long-term strategic assessments with minimal assistance
• Familiarity with computer networking fundamentals, computer network defense (CND) operations, host-based forensics and network traffic monitoring
• Ability to independently identify and track adversary tradecraft trends
• Understanding of technical terminology, tools, and tactics employed by threat actors
• An enthusiasm for collaboration, including being comfortable working in a team-oriented environment as well as across multiple teams to leverage subject matter expertise of colleagues
• Passionate about taking the initiative to identify and develop new visibility into adversary operations
• Ability or willingness to learn to conduct technical analysis of the tools and tradecraft used by threat actors
• Knowledge of geopolitical issues and ability to use that information to support understanding of current and future impacts on the cyber threat landscape
• Undergraduate degree, military training or relevant experience in cyber intelligence, computer science, general intelligence studies, security studies, political science, international relations, etc.
• Other technical security certifications or academic background, such as a graduate degree, are a plus.

Benefits Of Working At CrowdStrike

• Market leader in compensation and equity awards
• Comprehensive physical and mental wellness programs
• Competitive vacation and holidays for recharge
• Paid parental and adoption leaves
• Professional development opportunities for all employees regardless of level or role
• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
• Vibrant office culture with world class amenities
• Great Place to Work Certified™ across the globe

Key skills/competency

• Threat Intelligence
• Cybersecurity
• Intrusion Analysis
• Adversary Tracking
• Geopolitical Awareness
• OSINT
• Network Forensics
• Malware Triage
• Report Writing
• Collaboration