Lead Incident Response Consultant - Remote

CrowdStrike Inc.; Lincoln (NE); Remote; USD 140,000 - 195,000; Full time

Benefits offered by this job

Equity awards

Wellness programs

Vacation & holidays

Parental leave

Professional development

Employee networks

Office culture

Job summary

CrowdStrike, Inc. is seeking an experienced Incident Response Manager to lead engagements and mentor a team of analysts. You will drive investigations, scope objectives, and communicate findings to senior stakeholders across diverse industries.

The role emphasizes hands-on IR, forensics across Windows, Mac, and Linux, and collaboration with legal and executives. Remote-friendly with travel and a strong focus on security excellence.

Qualifications

• Experience leading incident response engagements in a consulting environment.
• Experience conducting or managing IR investigations for organizations.
• Background in computer forensics during IR investigations.

Responsibilities

• Lead incident response engagements and drive client objectives.
• Perform initial triage and scoping for prospective clients.
• Communicate with executives on forensics and malware analysis.
• Develop methods to hunt for threats across large data sets.
• Coach junior analysts in host and network forensics.
• Provide recommendations to mature security posture during incidents.
• Produce high-quality reports and presentations.

Skills

Team leadership

Incident Response

Forensic analysis

Network forensics

Reverse engineering

IR remediation

Cloud incident response

AI in security

Tools

Bro/Zeek

Suricata

Job description

CrowdStrike, Inc. is seeking an experienced Incident Response Manager to lead engagements and mentor a team of analysts. You will drive investigations, scope objectives, and communicate findings to senior stakeholders across diverse industries.

The role emphasizes hands-on IR, forensics across Windows, Mac, and Linux, and collaboration with legal and executives. Remote-friendly with travel and a strong focus on security excellence.