[Remote] Sr. Intelligence Analyst - DPRK Mission (Remote)

Note: The job is a remote job and is open to candidates in USA. CrowdStrike is a global leader in cybersecurity, dedicated to stopping breaches through advanced AI-native platforms. The Senior Intelligence Analyst will track and analyze DPRK-nexus cyber operations, produce intelligence assessments, and engage with internal and external stakeholders to enhance security measures.ResponsibilitiesTrack adversary campaigns, tactics, techniques, and procedures (TTPs) through analysis of CrowdStrike's unique telemetry, open-source data sets, and third-party intelligenceAuthor high-quality short and long format written reports independently that apply analytic tradecraft, including appropriate use of estimative language, confidence levels, and structured analytic techniquesGenerate reporting from a range of sources with minimal factual or accuracy errors and strong style, in line with CrowdStrike Intelligence standardsActively engage with inter-team discussions, including participation and leadership of groups in which you are the subject matter expertIdentify intelligence gaps and propose research projects to address collection shortfalls, proactively seeking opportunities to collaborate on products with other teamsRegularly conduct peer review of reporting by team members to maintain CrowdStrike Intelligence's analytic standards for accuracy, clarity, and objectivityLead and participate in analytic discussions, respecting and incorporating input from others into investigationsPrioritize, categorize, and respond to requests for information from internal and external customers, serving as a responsive go-to person on specific topicsIdentify and contribute to customer engagements and requests as directed for internal teams and external customers, actively contributing to resolving crisis situationsConduct briefings independently for a variety of customer levels via phone, video conference, webcast, in-person, or industry conferencesIdentify opportunities for automation and process improvements, contributing to the development of automation tools within existing frameworksLeverage cross-team contacts and inter-organizational partnerships to communicate and coordinate analytical prioritiesTrack DPRK-nexus financial operations, including cryptocurrency theft, money laundering tradecraft, and blockchain-based sanctions evasion activity, and assess implications for adversary capability development and operational tempoDevelop and maintain technical infrastructure tracking for DPRK-nexus adversaries, including use of tools such as Censys, VirusTotal, DomainTools, and Netflow to identify, pivot on, and document adversary infrastructureContribute to team knowledge transfer through peer review, mentorship of junior analysts, and documentation of analytical methodologies and research findings in shared knowledge storesSupport production planning discussions and contribute to prioritization of analytical workstreams and mission coverageSkillsSelf-motivated professional with 3+ years' experience in a threat intelligence environment, with demonstrated expertise in DPRK cyber operationsAdvanced knowledge of threat intelligence research/collection tools and analytical tradecraft methodsDemonstrated ability to identify, organize, catalog, and track adversary tradecraft trends — often with incomplete dataProven ability to produce a consistent stream of high-quality finished intelligence products on short deadlines independently, as well as maintaining analysis for long-term strategic assessmentsStrong understanding of technical concepts related to cyber threat research and ability to effectively communicate those concepts in written reportingAbility to conduct technical analysis of the tools and tradecraft employed by threat actors, as well as to enumerate and monitor threat actors' infrastructureDemonstrated proficiency with infrastructure tracking tools (e.g., Censys, VirusTotal, DomainTools, Netflow, or equivalent) and ability to document methodology, pivot logic, and findings in a format that enables team-level knowledge transferDemonstrated experience effectively coordinating research projects and written products among various sets of subject matter experts and technical specialistsStrong understanding and application of adversary attribution concepts and ability to present attribution points in complex cases and work with other SMEs to gain consensusExcellent knowledge of geopolitical issues specific to the DPRK (including North Korean strategic objectives, Korean Peninsula security dynamics, regional politics, and the DPRK's use of cyber operations for revenue generation and sanctions evasion) and ability to use that information to support understanding of current and future impacts on the cyber threat landscapeConducts self-driven research and reading, with excellent awareness of the state of the field and knowledge of the CrowdStrike Intelligence ecosystem as it relates to the DPRK missionUnderstanding of multiple sources that inform analysis and awareness of priorities within the mission areaActs as a role model for analytical objectivity and independently resolves analytical disagreementsAbility to act as a steady and reliable point of contact in times of high stressFamiliarity with cryptocurrency tracking platforms (e.g., Chainalysis, TRM Labs, or equivalent) or demonstrable ability to rapidly develop proficiency; understanding of blockchain-based money laundering and sanctions evasion techniques as they relate to state-sponsored cyber operationsExperience functioning as a team lead, senior contributor, or de facto subject matter expert within an intelligence production team; demonstrated ability to model analytical and technical methodology for less experienced analystsTrack record of proactive initiative in identifying and filling intelligence gaps, coordinating cross-team products, and driving analytical work to completion with limited directionEducation: Undergraduate degree, military training or relevant experience in cyber intelligence, computer science, general intelligence studies, security studies, political science, international relations, etcBenefitsEligibility for bonusesEquity grantsA comprehensive benefits package that includes health insurance, 401k and paid time offMarket leader in compensation and equity awardsComprehensive physical and mental wellness programsCompetitive vacation and holidays for rechargePaid parental and adoption leavesProfessional development opportunities for all employees regardless of level or roleEmployee Networks, geographic neighborhood groups, and volunteer opportunities to build connectionsVibrant office culture with world class amenitiesGreat Place to Work Certified™ across the globeCompany OverviewCrowdStrike is a cybersecurity technology firm that provides cloud-delivered protection for cloud workloads, identity, and data. It was founded in 2011, and is headquartered in Sunnyvale, California, USA, with a workforce of 5001-10000 employees. Its website is http://www.crowdstrike.com.