Incident Response Senior Consultant (Remote)
About The Position
CrowdStrike is seeking a highly motivated, self-driven technical consultant for its Services team, helping protect organizations from advanced cyber attackers. The role supports a wide variety of engagements, including high-profile incident response investigations for large organizations. The position is remote and may require periodic alcohol and/or drug testing during employment. The Senior Consultant leads incident response engagements, develops methods to hunt for attackers across large datasets, conducts intrusion investigations under outside counsel, and performs host- and network-based forensics across Windows, Mac, and Linux. The consultant also performs basic malware analysis and prepares written and verbal reports, presentations, recommendations, and findings for customer management, regulators, and legal counsel. The role includes sharing industry expertise through blog posts, CrowdCasts, and public speaking. Candidates should bring relevant experience in one or more areas including incident response, computer or network forensics, reverse engineering, remediation, network operations and architecture, cloud incident response, or communications. Candidates must be able to perform technical work independently, manage projects, contribute thought leadership, foster a positive work environment, travel on short notice up to 30% of the time, and have experience using AI technologies to improve decision-making, workflows, efficiency, and business outcomes. A relevant bachelor's or master's degree is sought, but applicants without a degree may be considered if they have relevant work experience and/or training.
Requirements
- Experience in one or more of the following areas: team leadership in a matrixed consulting environment; incident response; computer forensic analysis; network forensic analysis; reverse engineering; incident remediation; network operations and architecture/engineering; cloud incident response; or client and internal communications.
- Incident response experience conducting or managing investigations, including investigations of targeted threats such as advanced persistent threats, organized crime, and hacktivists.
- Experience using forensic analysis tools in incident response investigations to determine the extent and scope of compromise, if qualifying through computer forensic analysis.
- Strong knowledge of network protocols, network analysis tools such as Bro/Zeek or Suricata, and analysis of associated network logs, if qualifying through network forensic analysis.
- Ability to understand static and dynamic malware analysis capabilities, if qualifying through reverse engineering.
- Strong understanding of targeted attacks and the ability to create customized tactical and strategic remediation plans for compromised organizations, if qualifying through incident remediation.
- Strong understanding of secure network architecture and a background in network operations, if qualifying through network operations and architecture/engineering.
- Knowledge of incident response methodologies in AWS, Azure, or GCP, if qualifying through cloud incident response.
- Strong ability to communicate executive-level and/or detailed findings to clients and effectively communicate tasks, guidance, and methodology to internal teams, if qualifying through communications.
- Ability to complete technical tasks without supervision.
- Desire to grow and expand technical and soft skills.
- Strong project management skills.
- Contributing thought leader within the incident response industry.
- Ability to foster a positive work environment and attitude.
- Ability to travel on short notice, up to 30% of the time.
- Proven experience using AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes.
- BA/BS or MA/MS degree in Computer Science, Computer Engineering, Math, Information Security, Information Assurance, Information Security Management, Intelligence Studies, Cybersecurity, Cybersecurity Policy, or a related field. Applicants without a degree may be considered with relevant work experience and/or training.
Responsibilities
- Lead incident response engagements.
- Develop and use methods to hunt for bad actors across large datasets.
- Conduct intrusion investigations under the direction of outside counsel.
- Perform host- and/or network-based forensics across Windows, Mac, and Linux platforms.
- Perform basic malware analysis.
- Produce written and verbal reports, presentations, recommendations, and findings for customer management, regulators, and legal counsel.
- Demonstrate industry thought leadership through blog posts, CrowdCasts, and other public speaking events.
Benefits
- Market leader in compensation and equity awards.
- Comprehensive physical and mental wellness programs.
- Competitive vacation and holidays for recharge.
- Paid parental and adoption leaves.
- Professional development opportunities for all employees regardless of level or role.
- Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections.
- Vibrant office culture with world-class amenities.
- Eligibility for bonuses and equity grants.
- Health insurance, 401(k), and paid time off.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
