Regional Principal Analyst, Falcon Complete

Responsibilities: — Act as the principal technical advisor to Regional Directors and Senior Leadership Team on all Falcon Complete service delivery matters. — Ensure technical consistency, quality standards, and best practices across regional operations. — Lead regional technical initiatives and coordinate with other Regional Principals for global consistency and knowledge sharing. — Provide technical escalation support for Fireteam Principal Analysts on complex cases, offering second opinions, additional analysis, and guidance. — Conduct independent technical analysis to validate or extend fireteam findings. — Perform technical QA reviews of closed cases, identify detection gaps, false positives, and coverage opportunities, and route findings to relevant teams. — Identify opportunities for tooling, telemetry, workflow improvements, and regional trends in detection patterns and threat landscape. — Identify skill gaps and development opportunities among regional analysts. — Drive adoption of consistent operational standards and agentic toolsets. — Represent regional technical perspective in cross-functional initiatives with other business units. — Collaborate with Product/Engineering, OverWatch, Intelligence, and Watchtower teams to improve detection coverage and tuning. — Demonstrate industry thought leadership through blogs, presentations, and speaking events. — Provide technical expertise on regional projects aligned with Falcon Complete mission and corporate goals. — Drive innovation in detection gaps, triage, remediation, and automation. — Collaborate with AI Automation Team on regional automation opportunities. — Work independently with high autonomy, remaining hands-on and providing consultative guidance to leadership. Requirements: — Extensive experience in incident handling, including leading complex incident response investigations. — Proven experience investigating host/user compromises, organized crime groups, and nation-state adversaries. — Deep expertise in threat actor tactics, techniques, and procedures (TTPs), with proficiency in MITRE ATT&CK. — Advanced forensic analysis skills across host, memory, and network artifacts. — Advanced malware analysis capabilities, including reverse engineering and behavioral analysis. — Expert knowledge of Windows, Mac, and/or Linux operating systems. — Advanced experience in systems administration and securing enterprise networks. — Expert knowledge of network protocols and traffic analysis. — Deep expertise with identity and access management platforms such as Okta, Microsoft Entra ID, and Active Directory. — Advanced experience in Microsoft 365 security incident investigation and remediation. — Advanced proficiency in querying and correlating logs across cloud platforms, network devices, identity providers, and email platforms within SIEM. — Proven expertise in developing and executing strategic remediation plans. — Expert understanding of secure network architecture and troubleshooting. — Experience developing scripts and automation using Python, PowerShell, or Bash. — Experience working with AI models, platforms, and tooling, applying AI broadly across security operations. — BA/BS or MA/MS degree in relevant fields or equivalent experience. — May require periodic alcohol and/or drug testing. Benefits: — Market leader in compensation and equity awards. — Comprehensive physical and mental wellness programs. — Competitive vacation and holidays. — Paid parental and adoption leaves. — Professional development opportunities. — Employee networks and volunteer opportunities. — Vibrant office culture with world-class amenities. — Equal opportunity employer committed to diversity and inclusion. This is a full-time remote position based in the United States. Salary range is $145,000 - $220,000 per year with eligibility for bonuses, equity grants, and comprehensive benefits package including health insurance and 401k.