Incident Response Consultant (Remote)
About The Position
CrowdStrike is seeking a highly motivated, self-driven technical consultant for its Services team to help protect organizations against advanced attackers. The role supports a variety of engagements, including major incident response investigations for large organizations. Consultants work as part of technical teams, under project leadership and outside counsel, to investigate intrusions, hunt for malicious actors, analyze forensic evidence, and communicate findings to customer and other key stakeholders. The work spans host and network forensics across Windows, Mac, and Linux platforms, and may include supporting remediation planning. The position may periodically require alcohol and/or drug testing during employment.
Requirements
- Knowledge of or experience in one or more of the following areas: incident response, computer forensic analysis, network forensic analysis, reverse engineering, incident remediation, network operations and architecture/engineering, or cloud incident response.
- Incident response experience conducting or managing investigations for organizations, including investigations of targeted threats such as nation-state actors, e-crime, and hacktivists.
- Computer forensic analysis background using forensic tools in incident response investigations to determine the extent and scope of compromise.
- Strong knowledge of network protocols and network analysis tools such as Bro/Zeek or Suricata, and ability to analyze related network logs.
- Ability to understand the capabilities of static and dynamic malware analysis.
- Strong understanding of targeted attacks and ability to support customized tactical and strategic remediation plans for compromised organizations.
- Understanding of secure network architecture and a strong background in network operations.
- Knowledge of AWS, Azure, or GCP incident response methodologies.
- Strong ability to communicate executive-level and/or detailed findings to clients, and effectively communicate tasks, guidance, and methodology with internal teams.
- Proven experience using AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes.
- Candidates from an academic background will likely have a bachelor's degree in a related discipline, though advanced degrees are not required. Applicants without a degree but with relevant work experience and/or training will be considered.
Nice To Haves
- Ability to complete technical tasks with limited supervision.
- Desire to grow and expand technical and soft skills.
- Ability to foster a positive work environment and attitude.
Responsibilities
- Serve as part of the technical team on incident response engagements.
- Develop and use methods to hunt for bad actors across large data sets.
- Conduct intrusion investigations under the direction of project leadership and outside counsel.
- Perform host and/or network-based forensics across Windows, Mac, and Linux platforms.
- Support the production of written and verbal reports, presentations, recommendations, and findings for customer management, regulators, and legal counsel.
Benefits
- Market-leading compensation and equity awards.
- Comprehensive physical and mental wellness programs.
- Competitive vacation and holidays.
- Paid parental and adoption leaves.
- Professional development opportunities for employees at all levels and in all roles.
- Employee Networks, geographic neighborhood groups, and volunteer opportunities.
- Vibrant office culture with world-class amenities.
- Bonuses and equity grants eligibility.
- Health insurance, 401(k), and paid time off.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
