Incident Response Consultant (Remote)
About The Position
CrowdStrike is seeking a highly motivated, self-driven technical consultant to help protect organizations against advanced attackers. As part of CrowdStrike Services, the consultant will participate in a variety of engagements, including major incident response investigations for large organizations. The role involves technical investigation work, collaboration with project leadership and outside counsel, and communicating findings and recommendations to customers and other stakeholders. Candidates should bring experience or knowledge in one or more relevant cybersecurity specialties, along with strong communication skills and experience using AI technologies to improve work and business outcomes. Advanced degrees are not required; applicants without a degree may be considered based on relevant experience or training. The role may require periodic alcohol and/or drug testing during employment.
Requirements
- Knowledge of or experience in one or more of the following: incident response, computer forensic analysis, network forensic analysis, reverse engineering, incident remediation, network operations and architecture/engineering, or cloud incident response.
- Incident response experience conducting or managing investigations for organizations, including investigations of targeted threats such as nation-state actors, e-crime, and hacktivists.
- Background using forensic analysis tools in incident response investigations to determine the extent and scope of compromise.
- Strong knowledge of network protocols and network analysis tools such as Bro/Zeek or Suricata, with the ability to analyze related network logs.
- Ability to understand the capabilities of static and dynamic malware analysis.
- Strong understanding of targeted attacks and ability to support customized tactical and strategic remediation plans for compromised organizations.
- Understanding of secure network architecture and a strong background in network operations.
- Knowledge of AWS, Azure, or GCP incident response methodologies.
- Strong ability to communicate executive-level and/or detailed findings to clients and to communicate tasks, guidance, and methodology effectively with internal teams.
- Proven experience using AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes.
Nice To Haves
- Ability to complete technical tasks with limited supervision.
- Desire to grow and expand technical and soft skills.
- Ability to foster a positive work environment and attitude.
Responsibilities
- Serve as part of the technical team on incident response engagements.
- Develop and use methods to hunt for bad actors across large datasets.
- Conduct intrusion investigations under the direction of project leadership and outside counsel.
- Perform host- and/or network-based forensics across Windows, Mac, and Linux platforms.
- Support the production of high-quality written and verbal reports, presentations, recommendations, and findings for customer management, regulators, and legal counsel.
Benefits
- Market-leading compensation and equity awards.
- Comprehensive physical and mental wellness programs.
- Competitive vacation and holidays.
- Paid parental and adoption leaves.
- Professional development opportunities for all employees, regardless of level or role.
- Employee Networks, geographic neighborhood groups, and volunteer opportunities.
- Vibrant office culture with world-class amenities.
- Eligibility for bonuses and equity grants.
- Health insurance, 401(k), and paid time off.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
