> Markdown version of [/jobs/ext/1134073-endpoint-security-support-analyst-crowdstrike](https://www.wearedevelopers.com/jobs/ext/1134073-endpoint-security-support-analyst-crowdstrike). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Endpoint Security Support Analyst (Crowdstrike) - **Company:** RESOURCE MANAGEMENT INC - **Location:** Charleston, SC, United States (Remote available) - **Experience:** Starter - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Adobe Acrobat, Confluence, Collaborative Software, Cyber Security, Information Systems, Linux, Identity and Access Management, Issue Tracking Systems, Microsoft Office, Security Support Provider Interface, Microsoft SharePoint, EndPointSecurity, Servicenow - **Published:** July 2, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=943b41a2b2cdddc1 ## About the Role Experience: A minimum of one to two years of experience in an IT help desk, customer support, or similar administrative role. Certifications: Must be able to obtain a DoD 8570 IAM Level I certification within 6 months of hire. Education: An Associate's degree in a relevant field or two years of equivalent professional experience. Minimum Security Clearance: Secret Core Skills: * Strong written and verbal communication skills with an emphasis on customer service. * Ability to follow established procedures and checklists with high attention to detail. * Strong analytical skills for initial problem assessment and categorization. * Proficiency with standard desktop programs (MS Office, Adobe Acrobat). Highly Desired Skills: * Help Desk Experience: Prior experience using enterprise ticketing systems, particularly ServiceNow. * Security Concepts: Familiarity with basic host-based security tools and Endpoint Detection & Response (EDR) concepts. * Systems Familiarity: Basic understanding of Windows and/or Linux operating systems. * Collaboration Tools: Experience with MS Teams, Confluence, and SharePoint for documentation and team collaboration. ## Description The Naval Information Warfare Center (NIWC) Atlantic Defensive Cyberspace Operations (DCO) Integrated Product Team (IPT) is charged with the mission of conducting Defensive Cyberspace Operations to defend subscriber networks. The DHA Cybersecurity Operations Center (CyOC) coordinates and orchestrates cybersecurity activities execution at the DoD Component scale to protect information systems against unauthorized activity, vulnerabilities, or threats. RMC is hiring for an experienced Endpoint Security Support Analyst (Crowdstrike) who will support a US Navy environment. The Endpoint Security Support Analyst serves as a frontline interface between DHA subscribers and the Endpoint Security team. This role is responsible for monitoring the CrowdStrike Falcon console, performing initial triage of security alerts, and providing Tier 1 customer support for endpoint security issues. The position focuses on documenting and categorizing events using established playbooks, handling service desk inquiries, and escalating complex issues to senior Endpoint Security Operators for resolution. Duties * Alert Triage & Customer Support - Act as the first responder for customer support requests submitted via the service desk (ServiceNow). Monitor the CrowdStrike detection queue and provide Tier 1 support for endpoint security inquiries. * Initial Investigation & Documentation - Perform initial triage of low-to-medium severity alerts using established mini-playbooks. Accurately document findings and categorize detections as Benign, an Event, or requiring escalation. * Escalation & Communication - Escalate complex technical issues, unresolved user problems, and potential Incidents to senior Endpoint Security Operators for advanced investigation and response. * Compliance & Reporting Support - Assist senior operators by running pre-defined compliance reports, tracking task completion in the ticketing system, and helping to maintain accurate records for auditing purposes. ## Related Videos - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [42 x 2 Canvases Later: Two Years, Two Minds, Many Lessons](https://www.wearedevelopers.com/videos/1458-42-x-2-canvases-later-two-years-two-minds-many-lessons) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [AI in Production: applied AI & enterprise use cases](https://www.wearedevelopers.com/videos/100130-ai-in-production-applied-ai-enterprise-use-cases) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)