Principal Consultant - Cloud Red Team Blue Team (Remote)
About The Position
As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you. About the Role: You will conduct Cloud Red Team Blue Team (CRTBT) engagements as a Blue Teamer, supporting the customer's SOC/IR team in real-time threat hunting and incident response while the CrowdStrike Blue Red Teamer performs cloud-focused adversary emulation techniques against customer environments. What You'll Do: You will work closely with customers to understand their existing cloud security controls and detection capabilities, leveraging that knowledge to support their SOC/IR teams in real-time threat hunting, detection engineering, and incident response during cloud-focused adversary emulation exercises. Additionally, you will manage engagements from kickoff through report delivery, identify long-term enhancements to the CRTBT offering that sharpen adversary emulation tradecraft and better enable clients to detect, stop, and recover from cloud-based breaches.
Requirements
- At least 5 years experience in blue team consulting services or MSSP roles, with a strong background in one or more public cloud platforms (typically AWS, Azure infrastructure, Microsoft Entra ID/M365 & GCP).
- 1-2 years conducting proactive security assessments, incident response activities, or Purple Team exercises.
- 5+ years cybersecurity industry experience overall, ideally in hands-on roles including incident response, threat hunting, cloud engineering, etc.
- Experience in scripting, automation, and tooling development to support blue team operations, streamline engagement workflows, and build or extend custom blue team offerings.
- Experience with building and growing relationships with client mid-level managers and executives.
- Experience in customer-facing project management with a keen eye toward customer service.
- Hands-on experience in information security programs across areas such as endpoint security, cloud security, network security, threat intelligence, or security operations is beneficial.
- Demonstrated ability to excel in a fast-paced professional services environment and ability to balance competing priorities while still maintaining focus on details.
- Proven track record in technical and creative problem solving coupled with the analytical expertise to provide quick resolution to problems.
- Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.
- Excellent client management skills & consulting poise.
- Exceptional oral and written communication skills.
- Strong business acumen.
- Ability to foster a positive work environment and attitude.
Responsibilities
- Conduct Cloud Red Team Blue Team (CRTBT) engagements as a Blue Teamer.
- Support the customer's SOC/IR team in real-time threat hunting and incident response.
- Work closely with customers to understand their existing cloud security controls and detection capabilities.
- Leverage knowledge of cloud security controls to support SOC/IR teams in real-time threat hunting, detection engineering, and incident response during cloud-focused adversary emulation exercises.
- Manage engagements from kickoff through report delivery.
- Identify long-term enhancements to the CRTBT offering that sharpen adversary emulation tradecraft and better enable clients to detect, stop, and recover from cloud-based breaches.
Benefits
- Market leader in compensation and equity awards
- Comprehensive physical and mental wellness programs
- Competitive vacation and holidays for recharge
- Paid parental and adoption leaves
- Professional development opportunities for all employees regardless of level or role
- Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
- Vibrant office culture with world class amenities
- Great Place to Work Certified™ across the globe
- Health insurance
- 401k
- Paid time off
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Principal
Education Level
No Education Listed
