Incident Response Sr. Consultant (Remote)

CrowdStrike•USA AZ Remote, AZ

1d•$115,000 - $160,000•Remote

About The Position

CrowdStrike is seeking a highly motivated, self-driven technical consultant for its Services team. The role protects organizations against advanced attackers and supports a wide variety of engagements, including high-profile incident response investigations. The Senior Consultant leads incident response engagements, investigates intrusions, conducts forensic analysis, develops methods to hunt for threat actors, and communicates findings to customer and other stakeholders. The position may require periodic alcohol and/or drug testing during employment.

Requirements

Experience in one or more relevant areas, including team leadership in a matrixed consulting environment; incident response; computer forensic analysis; network forensic analysis; reverse engineering and malware analysis; incident remediation; network operations and architecture/engineering; cloud incident response; or client and internal-team communications.
Incident response experience conducting or managing investigations into targeted threats such as advanced persistent threats, organized crime, and hacktivists.
Knowledge of network protocols and network analysis tools such as Bro/Zeek or Suricata, and ability to analyze related network logs.
Strong understanding of targeted attacks and the ability to create customized tactical and strategic remediation plans for compromised organizations.
Knowledge of incident response methodologies for at least one of AWS, Azure, or GCP.
Proven experience using AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes.
Ability to complete technical tasks without supervision.
Desire to grow and expand technical and soft skills.
Strong project management skills.
Contributing thought leader in the incident response industry.
Ability to foster a positive work environment and attitude.
Ability to travel on short notice, up to 30% of the time.
BA/BS or MA/MS in Computer Science, Computer Engineering, Math, Information Security, Information Assurance, Information Security Management, Intelligence Studies, Cybersecurity, Cybersecurity Policy, or a related field; applicants without a degree may be considered with relevant work experience and/or training.

Responsibilities

Lead incident response engagements.
Develop and use new methods to hunt for bad actors across large sets of data.
Conduct intrusion investigations under the direction of outside counsel.
Perform host and/or network-based forensics across Windows, Mac, and Linux platforms.
Perform basic malware analysis.
Produce written and verbal reports, presentations, recommendations, and findings for customer management, regulators, and legal counsel.
Demonstrate industry thought leadership through blog posts, CrowdCasts, and other public speaking events.