Professional Services Principal Consultant - Incident Response (Remote, GBR)

Location: United Kingdom - Remote

Company

CrowdStrike is a global cybersecurity company providing an AI-native platform for protecting organizations from advanced attacks.

What you will do

• Serve as the technical lead on incident response engagements, including investigations for large organizations.
• Develop and apply methods to hunt for threat actors across large datasets.
• Conduct intrusion investigations under the direction of outside counsel.
• Perform host and network forensics across Windows, Mac, and Linux platforms.
• Prepare written and verbal reports, presentations, recommendations, and findings for customer management, regulators, and legal counsel.
• Demonstrate incident response thought leadership through blog posts, CrowdCasts, and public speaking.

Requirements

• Experience conducting or managing incident response investigations involving targeted threats such as advanced persistent threats, organized crime, and hacktivists.
• Experience with computer forensic analysis tools used to determine the extent and scope of compromise.
• Strong knowledge of network protocols, network analysis tools such as Bro/Zeek or Suricata, and analysis of related network logs.
• Ability to understand static and dynamic malware analysis and reverse engineering.
• Strong understanding of targeted attacks and the ability to create customized tactical and strategic remediation plans.
• Strong understanding of secure network architecture and experience performing network operations.
• Knowledge of cloud incident response methodologies for AWS, Azure, or GCP.
• Strong communication skills for presenting executive-level and detailed findings to clients and communicating tasks, guidance, and methodology to internal teams; ability to complete technical tasks without supervision.
• Strong project management skills, incident response industry thought leadership, a positive work attitude, and proven experience using AI technologies to improve decision-making, workflows, efficiency, and business outcomes.
• BA, BS, MA, or MS in Computer Science, Computer Engineering, Math, Information Security, Information Assurance, Information Security Management, Intelligence Studies, Cybersecurity, Cybersecurity Policy, or a related field; applicants without a degree may be considered with relevant work experience and/or training.

Nice to have

• GIAC Certified Incident Handler (GCIH).
• GIAC Certified Forensic Analyst (GCFA) or GCFE.
• Certified Information Systems Security Professional (CISSP).
• Certified Ethical Hacker (CEH).
• OSCP or OSCE certification.
• Cloud incident response experience with AWS, Azure, or GCP.

Culture & Benefits

• Remote work with flexibility and autonomy.
• Physical and mental wellness programs.
• Competitive vacation and holidays, plus paid parental and adoption leave.
• Professional development opportunities for all employees.
• Employee networks, geographic neighborhood groups, and volunteer opportunities.
• Compensation and equity awards, plus a global office culture.