Threat Emulation & Exposure Principal Consultant (Cybersecurity)

Location: USA - Remote; occasional travel may be required, under 25%.

Base salary: $140,000–$200,000 per year for U.S. candidates, with bonus and equity eligibility.

Company

CrowdStrike provides an AI-native cybersecurity platform for protecting organizations and their IT environments.

What you will do

• Operate AI-enabled service capabilities for exposure management, red teaming, vulnerability management, penetration testing, and mitigation.
• Coordinate customer delivery as the primary contact for risk exposure and security assessment services.
• Refine, improve, document, and present outputs from SafeMind, Falcon, and other frontier capabilities to executive and technical audiences.
• Communicate recommendations that improve technical service capabilities and support delivery operations.
• Advise customers and CrowdStrike stakeholders at executive and technical levels.
• Mentor and support junior team members.

Requirements

• At least 5 years of experience in penetration testing or application security activities is highly preferred.
• Experience in vulnerability management, continuous threat exposure management, and technical risk consulting.
• Advanced experience with security assessment toolsets including Metasploit, NMAP, Cobalt Strike, Nessus, and Burp Suite.
• Strong understanding of security methodologies, technologies, and best practices.
• Experience with Windows, Linux, UNIX, and Mac operating systems.
• Advanced experience with networking components such as routers, switches, load balancers, and wireless access points.
• Experience with generative AI and agentic technologies, including their use in security operations.
• Advanced experience automating and scripting applications and systems, with operational support experience for operating systems, applications, and networks.
• Strong knowledge of firewalls, proxies, mail servers, and web servers; proven use of AI technologies to improve decision-making, workflows, efficiency, and business outcomes.
• Ability to communicate effectively with executive leadership, technical support teams, customers, and internal stakeholders.

Nice to have

• Participation in the security community, such as conference speaking or tool development contributions.
• OSCP, OSEP, GPEN, GXPN, or CRTO certification.

Culture & Benefits

• Full-time employment with a remote work arrangement and flexibility with autonomy.
• Competitive compensation, equity awards, health insurance, 401(k), paid time off, vacation, and holidays.
• Physical and mental wellness programs, paid parental and adoption leave.
• Professional development opportunities, employee networks, neighborhood groups, and volunteer opportunities.
• The role may require periodic alcohol and/or drug testing during employment.