Manager, Incident Response Consulting - Weekend Shift Team (Remote)

Location: Remote within the USA; weekend team operates on a 4x10 schedule, Friday–Monday. Travel may be required on short notice, up to 30% of the time.

Base salary: $140,000–$195,000 per year, plus eligibility for bonuses, equity grants, health insurance, 401(k), and paid time off.

Company

CrowdStrike is a cybersecurity company providing an AI-native platform that protects organizations from breaches and processes large-scale security event data.

What you will do

• Lead incident response consulting engagements and perform initial triage and scoping for prospective clients.
• Communicate with executives, customer management, regulators, legal counsel, and outside counsel about forensics, malware analysis, findings, and recommendations.
• Develop and apply methods to hunt for bad actors across large datasets and conduct intrusion investigations.
• Coach and mentor junior analysts performing host and network forensics across Windows, Mac, and Linux.
• Create tactical and strategic recommendations to mature customer security postures during and after incidents.
• Produce written and verbal reports, presentations, recommendations, and findings, and contribute thought leadership through blog posts, CrowdCasts, and public speaking.

Requirements

• Experience leading teams in a matrixed consulting environment.
• Experience conducting or managing incident response investigations, including investigations of targeted threats such as advanced persistent threats, organized crime, and hacktivists.
• Background using forensic analysis tools to determine the extent and scope of compromise.
• Strong knowledge of network protocols, network analysis tools such as Bro/Zeek or Suricata, and analysis of associated network logs.
• Ability to understand static and dynamic malware analysis.
• Strong understanding of targeted attacks and ability to create customized tactical and strategic remediation plans.
• Strong understanding of secure network architecture and background in network operations.
• Knowledge of cloud incident response methodologies in AWS, Azure, or GCP.
• Proven experience using AI technologies to improve decision-making, workflows, efficiency, and business outcomes.

Nice to have

• Ability to complete technical tasks without supervision.
• Desire to expand technical and soft skills.
• Strong project management skills.
• Thought leadership within the incident response industry.
• Ability to foster a positive work environment and attitude.
• Ability to travel on short notice, up to 30% of the time.

Culture & Benefits

• Flexibility, autonomy, and a focus on responsible AI adoption, experimentation, and innovation.
• Market-leading compensation, equity awards, comprehensive physical and mental wellness programs, and competitive vacation and holidays.
• Paid parental and adoption leave and professional development opportunities.
• Employee networks, geographic neighborhood groups, volunteer opportunities, and office amenities.
• Equal employment opportunity and support for veterans and individuals with disabilities.
• The role may require periodic alcohol and/or drug testing during employment.