Cloud Security Blue Team Lead (CRTBT)

CrowdStrike Holdings, Inc.; Northern (KY); Hybrid; USD 140,000 - 195,000; Full time

Benefits offered by this job

Equity awards

Wellness programs

Vacation & holidays

Parental leave

Professional development

Employee networks

Office culture

Great Place to Work

Job summary

CrowdStrike is seeking a Cloud Red Team Blue Team (CRTBT) engagement lead to support customers’ SOC/IR in real-time threat hunting and incident response against cloud environments. You will manage engagements from kickoff to report delivery and refine adversary emulation capabilities.

Ideal candidates have 5+ years in blue team consulting or MSSP roles, strong cloud experience (AWS/Azure/GCP), and hands-on IR, threat hunting, and automation skills. Remote flexibility is available.

Qualifications

• 5+ years blue team consulting or MSSP roles.
• Public cloud platforms experience (AWS, Azure, GCP).
• 1-2 years proactive security assessments, IR, or Purple Team.
• 5+ years cybersecurity industry experience, hands-on.
• Scripting, automation, and tooling development for blue team ops.
• Experience building relationships with client mid-level managers.
• Customer-facing project management and service mindset.

Responsibilities

• Work with customers to understand cloud security controls and detections.
• Support SOC/IR teams in real-time threat hunting, detection engineering, and IR.
• Manage engagements from kickoff through report delivery.
• Identify long-term enhancements to CRTBT offerings to improve adversary emulation.

Skills

Blue team consulting

MSSP roles

Cloud platforms

Incident response

Threat hunting

Automation scripting

Client relationship

Project management

Job description

CrowdStrike is seeking a Cloud Red Team Blue Team (CRTBT) engagement lead to support customers’ SOC/IR in real-time threat hunting and incident response against cloud environments. You will manage engagements from kickoff to report delivery and refine adversary emulation capabilities.

Ideal candidates have 5+ years in blue team consulting or MSSP roles, strong cloud experience (AWS/Azure/GCP), and hands-on IR, threat hunting, and automation skills. Remote flexibility is available.