Manager, Incident Response Consulting (Remote)
About The Position
CrowdStrike is hiring a Manager, Incident Response Consulting to lead incident response engagements and guide teams through complex investigations. The role involves triaging and scoping prospective client engagements, communicating forensic and malware analysis findings to executives, developing methods to hunt for threat actors across large datasets, and conducting intrusion investigations under the direction of outside counsel. The manager will coach junior analysts in host- and network-based forensics across Windows, Mac, and Linux platforms, and provide practical recommendations to improve organizations’ security posture during and after incidents. The position also produces reports, presentations, recommendations, and findings for customer management, regulators, and legal counsel, and demonstrates industry thought leadership through public content and speaking engagements. Candidates should bring experience in one or more of incident response, computer or network forensics, malware reverse engineering, incident remediation, network operations and architecture, or cloud incident response. Successful candidates can complete technical tasks independently, manage projects, contribute thought leadership, foster a positive work environment, and travel on short notice up to 30% of the time. The role may require periodic alcohol and/or drug testing during employment.
Requirements
- Experience in one or more of the following areas: team leadership in a matrixed consulting environment; incident response investigations involving targeted threats; computer forensic analysis; network forensic analysis; malware reverse engineering; incident remediation; network operations and architecture/engineering; or cloud incident response.
- Incident response experience conducting or managing investigations for organizations, including investigations of targeted threats such as advanced persistent threats, organized crime, and hacktivists.
- Computer forensic analysis experience using a variety of forensic tools to determine the extent and scope of compromise.
- Strong knowledge of network protocols and network analysis tools such as Bro/Zeek or Suricata, with the ability to analyze associated network logs.
- Ability to understand the capabilities of static and dynamic malware analysis.
- Strong understanding of targeted attacks and ability to create customized tactical and strategic remediation plans for compromised organizations.
- Strong understanding of secure network architecture and a background in network operations.
- Knowledge of incident response methodologies for at least one of AWS, Azure, or GCP.
- Proven experience using AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes.
- Ability to complete technical tasks without supervision.
- Desire to grow and expand technical and soft skills.
- Strong project management skills.
- Contributing thought leader within the incident response industry.
- Ability to foster a positive work environment and attitude.
- Ability to travel on short notice, up to 30% of the time.
Responsibilities
- Lead incident response engagements.
- Perform initial triage and scoping for prospective clients to understand their objectives and the effort required.
- Communicate effectively with executives about forensics and malware analysis.
- Develop and use methods to hunt for bad actors across large datasets.
- Conduct intrusion investigations under the direction of outside counsel.
- Coach and mentor junior analysts conducting host- and/or network-based forensics across Windows, Mac, and Linux platforms.
- Provide strategic, applicable, and feasible recommendations to help organizations mature their security posture during and after an incident.
- Produce written and verbal reports, presentations, recommendations, and findings for stakeholders, including customer management, regulators, and legal counsel.
- Demonstrate industry thought leadership through blog posts, CrowdCasts, and other public speaking events.
Benefits
- Market leader in compensation and equity awards.
- Comprehensive physical and mental wellness programs.
- Competitive vacation and holidays.
- Paid parental and adoption leaves.
- Professional development opportunities for all employees regardless of level or role.
- Employee Networks, geographic neighborhood groups, and volunteer opportunities.
- Vibrant office culture with world-class amenities.
- Eligibility for bonuses and equity grants.
- Health insurance, 401(k), and paid time off.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Manager
Education Level
No Education Listed
