Incident Response Consultant (Remote)

CrowdStrike•USA TX Remote, TX

2d•$95,000 - $140,000•Remote

About The Position

CrowdStrike is seeking a highly motivated, self-driven technical consultant for its Services team, helping protect organizations against advanced attackers. The role offers a variety of engagements, including incident response investigations for major organizations. Consultants work as part of technical teams, under project leadership and outside counsel, to investigate intrusions and support customers through security incidents.

Requirements

Knowledge or experience in one or more of the listed areas: incident response, computer forensic analysis, network forensic analysis, reverse engineering, incident remediation, network operations and architecture/engineering, or cloud incident response.
Incident response experience conducting or managing investigations, including investigation of targeted threats such as nation-state actors, e-crime, and hacktivists.
Computer forensic analysis experience using forensic tools to determine the extent and scope of compromise.
Strong knowledge of network protocols and network analysis tools such as Bro/Zeek or Suricata, with the ability to analyze associated network logs.
Ability to understand the capabilities of static and dynamic malware analysis.
Strong understanding of targeted attacks and ability to support customized tactical and strategic remediation plans.
Understanding of secure network architecture and a strong background in network operations.
Knowledge of AWS, Azure, or GCP incident response methodologies.
Strong communication skills, including explaining executive-level and detailed findings to clients and communicating tasks, guidance, and methodology to internal teams.
Proven experience using AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes.

Nice To Haves

Ability to complete technical tasks with limited supervision.
Desire to grow and expand technical and soft skills.
Ability to foster a positive work environment and attitude.

Responsibilities

Serve as part of the technical team on incident response engagements.
Develop and use methods to hunt for bad actors across large sets of data.
Conduct intrusion investigations under the direction of project leadership and outside counsel.
Perform host- and/or network-based forensics across Windows, Mac, and Linux platforms.
Support the production of written and verbal reports, presentations, recommendations, and findings for customer management, regulators, and legal counsel.