Incident Response Senior Consultant (Cybersecurity)

Location: Remote in Canada, including Ontario, Nova Scotia, New Brunswick, British Columbia, Alberta, and Manitoba. This is Canadian-based employment; employees must maintain legal entitlement to work in Canada.

Salary: CAD 100,000–165,000 per year, plus variable/incentive compensation, equity, and benefits.

Company

CrowdStrike is a cybersecurity company providing an AI-native platform for protecting organizations from breaches and advanced attacks.

What you will do

• Lead incident response engagements for organizations, including major global enterprises.
• Develop and apply methods to hunt for threat actors across large datasets.
• Conduct intrusion investigations under the direction of outside counsel.
• Perform host and network forensics across Windows, Mac, and Linux platforms, including basic malware analysis.
• Prepare written and verbal reports, presentations, recommendations, and findings for customer management, regulators, and legal counsel.
• Demonstrate industry thought leadership through blog posts, CrowdCasts, and other public speaking events.

Requirements

• Experience in one or more of the following areas is required: team leadership in a matrixed consulting environment; incident response investigations involving targeted threats such as Advanced Persistent Threats, organized crime, and hacktivists; or computer forensic analysis using varied forensic tools to determine the extent and scope of compromise.
• Strong knowledge of network protocols, network analysis tools such as Bro/Zeek or Suricata, and associated network log analysis.
• Ability to understand static and dynamic malware analysis.
• Strong understanding of targeted attacks and ability to create customized tactical and strategic remediation plans for compromised organizations.
• Strong understanding of secure network architecture and a strong background in network operations.
• Knowledge of incident response methodologies for AWS, Azure, or GCP.
• Strong ability to communicate executive-level and detailed findings to clients and communicate tasks, guidance, and methodology to internal teams.
• BA, BS, MA, or MS degree in Computer Science, Computer Engineering, Mathematics, Information Security, Information Assurance, Information Security Management, Intelligence Studies, Cybersecurity, Cybersecurity Policy, or a related field. Relevant work experience and/or training may be considered instead of a degree.

Nice to have

• Ability to complete technical tasks without supervision.
• Desire to grow and expand technical and soft skills.
• Strong project management skills.
• Thought leadership in the incident response industry.
• Ability to foster a positive work environment and attitude.
• Ability to travel on short notice, up to 30% of the time.
• Experience using AI technologies to improve decision-making, streamline workflows and processes, increase efficiency, and drive business outcomes.

Culture & Benefits

• Remote work with flexibility and autonomy.
• Variable/incentive compensation, equity, and competitive benefits.
• Physical and mental wellness programs.
• Competitive vacation and holidays, plus paid parental and adoption leave.
• Professional development opportunities, employee networks, geographic neighborhood groups, and volunteer opportunities.
• Employment is subject to background checks, including criminal record, credit, and/or reference checks.