Manager, Incident Response Consulting (Remote)
About The Position
CrowdStrike is hiring a Manager, Incident Response Consulting, to lead incident response engagements and investigations for customers. The role includes assessing prospective engagements, communicating with executives about forensics and malware analysis, developing methods to hunt for threat actors, and conducting investigations under outside counsel. The manager will coach junior analysts, provide practical recommendations to improve organizations’ security posture, and deliver written and verbal findings to customer leadership, regulators, and legal counsel. The position also contributes industry thought leadership through public content and speaking events. The role is remote and may require travel on short notice, up to 30% of the time. Candidates may periodically be required to undergo and pass alcohol and/or drug tests during employment.
Requirements
- Experience in one or more of the listed areas: team leadership in a matrixed consulting environment; incident response; computer forensic analysis; network forensic analysis; reverse engineering; incident remediation; network operations and architecture/engineering; or cloud incident response.
- Incident response experience conducting or managing investigations, including investigations of targeted threats such as advanced persistent threats, organized crime, and hacktivists.
- Computer forensic analysis experience using a variety of forensic tools to determine the extent and scope of compromise.
- Strong knowledge of network protocols and network analysis tools such as Bro/Zeek or Suricata, and ability to analyze associated network logs.
- Ability to understand the capabilities of static and dynamic malware analysis.
- Strong understanding of targeted attacks and ability to create customized tactical and strategic remediation plans for compromised organizations.
- Strong understanding of secure network architecture and background in network operations.
- Knowledge of incident response methodologies in one or more of AWS, Azure, or GCP.
- Proven experience using AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes.
- Ability to complete technical tasks without supervision.
- Desire to grow and expand technical and soft skills.
- Strong project management skills.
- Contributing thought leader in the incident response industry.
- Ability to foster a positive work environment and attitude.
- Ability to travel on short notice, up to 30% of the time.
Responsibilities
- Lead incident response engagements.
- Perform initial triage and scoping for prospective clients to understand objectives and the effort required.
- Communicate effectively with executives about forensics and malware analysis.
- Develop and use methods to hunt for bad actors across large datasets.
- Conduct intrusion investigations under the direction of outside counsel.
- Coach and mentor junior analysts in host- and/or network-based forensics across Windows, Mac, and Linux platforms.
- Provide strategic, applicable, and feasible recommendations to mature organizations’ security posture during and after an incident.
- Produce written and verbal reports, presentations, recommendations, and findings for customer management, regulators, and legal counsel.
- Demonstrate industry thought leadership through blog posts, CrowdCasts, and other public speaking events.
Benefits
- Bonuses and equity grants.
- Health insurance.
- 401(k).
- Paid time off.
- Comprehensive physical and mental wellness programs.
- Competitive vacation and holidays.
- Paid parental and adoption leaves.
- Professional development opportunities for all employees.
- Employee networks, geographic neighborhood groups, and volunteer opportunities.
- Office amenities.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Manager
Education Level
No Education Listed
