Incident Response Principal Consultant (Remote)
About The Position
CrowdStrike is seeking a highly motivated, self-driven technical consultant for its Services team. The role protects organizations against advanced attackers and includes a variety of engagements, including high-profile incident response investigations. The Principal Consultant leads response engagements, investigates intrusions, conducts forensic analysis, and communicates findings and recommendations to customer and other stakeholders. The role also contributes thought leadership through public content and speaking engagements. Candidates should be able to perform technical work independently, lead and collaborate with teams, and travel on short notice up to 30% of the time. A degree in a relevant field is requested, though applicants without a degree may be considered based on relevant experience and/or training. The position is remote and may require periodic alcohol and/or drug testing during employment.
Requirements
- Experience in one or more of the following areas: team leadership in a matrixed consulting environment; incident response investigations; computer forensic analysis; network forensic analysis; reverse engineering and malware analysis; incident remediation; network operations and architecture/engineering; cloud incident response; or client and internal communications.
- Incident response experience conducting or managing investigations into targeted threats such as advanced persistent threats, organized crime, and hacktivists.
- Experience using forensic analysis tools to determine the extent and scope of compromise.
- Strong knowledge of network protocols and network analysis tools such as Bro/Zeek or Suricata, and ability to analyze related network logs, if qualifying through network forensic analysis.
- Ability to understand static and dynamic malware analysis capabilities, if qualifying through reverse engineering.
- Strong understanding of targeted attacks and ability to create customized tactical and strategic remediation plans, if qualifying through incident remediation.
- Strong understanding of secure network architecture and background in network operations, if qualifying through network operations and architecture/engineering.
- Knowledge of incident response methodologies for AWS, Azure, or GCP, if qualifying through cloud incident response.
- Strong ability to communicate executive-level and/or detailed findings to clients and communicate tasks, guidance, and methodology to internal teams.
- Proven experience using AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes.
- Ability to complete technical tasks without supervision.
- Desire to grow and expand technical and soft skills.
- Strong project management skills.
- Contributing thought leader within the incident response industry.
- Ability to foster a positive work environment and attitude.
- Ability to travel on short notice, up to 30% of the time.
- BA/BS or MA/MS in Computer Science, Computer Engineering, Math, Information Security, Information Assurance, Information Security Management, Intelligence Studies, Cybersecurity, Cybersecurity Policy, or a related field; applicants without a degree may be considered with relevant work experience and/or training.
Responsibilities
- Lead incident response engagements.
- Develop and use methods to hunt for bad actors across large datasets.
- Conduct intrusion investigations under the direction of outside counsel.
- Perform host- and/or network-based forensics across Windows, Mac, and Linux platforms.
- Perform basic malware analysis.
- Produce written and verbal reports, presentations, recommendations, and findings for customer management, regulators, and legal counsel.
- Demonstrate industry thought leadership through blog posts, CrowdCasts, and other public speaking events.
- Travel on short notice, up to 30% of the time.
Benefits
- Market-leading compensation and equity awards.
- Comprehensive physical and mental wellness programs.
- Competitive vacation and holidays.
- Paid parental and adoption leaves.
- Professional development opportunities for employees at all levels and in all roles.
- Employee Networks, geographic neighborhood groups, and volunteer opportunities.
- Office culture with world-class amenities.
- Health insurance, 401(k), and paid time off.
- Eligibility for bonuses and equity grants.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Principal
