Incident Response Principal Consultant (Cybersecurity)

Location: USA - Remote; ability to travel on short notice up to 30% of the time.

Base salary: $140,000–$195,000 per year, with eligibility for bonuses, equity grants, and benefits.

Company

CrowdStrike is a cybersecurity company protecting organizations with an AI-native platform and large-scale distributed systems.

What you will do

• Lead incident response engagements for major organizations and investigate advanced threats, including targeted attacks.
• Develop and apply methods to hunt for bad actors across large datasets.
• Conduct intrusion investigations under the direction of outside counsel.
• Perform host and network forensics across Windows, Mac, and Linux platforms, as well as basic malware analysis.
• Produce written and verbal reports, presentations, recommendations, and findings for customer management, regulators, and legal counsel.
• Demonstrate incident response thought leadership through blog posts, CrowdCasts, and public speaking.

Requirements

• Experience leading teams in a matrixed consulting environment.
• Experience conducting or managing incident response investigations, including investigations of advanced persistent threats, organized crime, and hacktivists.
• Background in computer forensic analysis and use of forensic tools to determine the extent and scope of compromise.
• Strong knowledge of network protocols, network analysis tools such as Bro/Zeek or Suricata, and analysis of associated network logs.
• Ability to understand static and dynamic malware analysis.
• Strong understanding of targeted attacks and ability to create customized tactical and strategic remediation plans for compromised organizations.
• Strong understanding of secure network architecture and background in network operations.
• Knowledge of AWS, Azure, or GCP incident response methodologies.
• Strong ability to communicate executive-level and detailed findings to clients and communicate tasks, guidance, and methodology to internal teams.
• Proven experience using AI technologies to improve decision-making, workflows, efficiency, and business outcomes.
• Ability to complete technical tasks without supervision; desire to grow technical and soft skills; strong project management skills; and ability to foster a positive work environment and attitude.
• Contributing thought leader within the incident response industry.
• BA or BS, or MA or MS, in Computer Science, Computer Engineering, Math, Information Security, Information Assurance, Information Security Management, Intelligence Studies, Cybersecurity, Cybersecurity Policy, or a related field. Relevant work experience and/or training may be considered instead of a degree.
• Ability to travel on short notice, up to 30% of the time.

Culture & Benefits

• Flexible, autonomous work environment with an emphasis on responsible AI adoption, experimentation, and innovation.
• Comprehensive physical and mental wellness programs.
• Competitive vacation and holidays, plus paid parental and adoption leave.
• Professional development opportunities for all employees.
• Employee networks, geographic neighborhood groups, volunteer opportunities, and office amenities.
• Health insurance, 401(k), and other benefits for U.S. candidates.