Lead Incident Response Consultant - Remote & High Impact

CrowdStrike Inc.; Annapolis (MD); Remote; USD 140,000 - 195,000; Full time

Benefits offered by this job

Health insurance

401k

Paid time off

Parental and adoption leaves

Professional development

Job summary

CrowdStrike is seeking a highly motivated principal consultant to lead incident response engagements and drive forensic investigations across Windows, Mac, and Linux. You will hunt for adversaries, conduct intrusion investigations with legal counsel, and deliver high-quality reports to executives and clients.

The role emphasizes experience in incident response, network forensics, and malware analysis, with opportunities to share thought leadership through CrowdStrike channels.

Qualifications

• Experience leading incident response investigations.
• Strong forensic and network analysis capabilities.
• Ability to communicate findings to executives and clients.

Responsibilities

• Lead incident response engagements.
• Develop methods to hunt for bad actors in large data sets.
• Conduct intrusion investigations with outside counsel.
• Perform host and/or network forensics on Windows, Mac, Linux.
• Perform basic malware analysis.
• Produce high-quality written/verbal reports for stakeholders.
• Demonstrate thought leadership via blog posts and events.

Skills

Incident Response

Team leadership

Forensic analysis

Network forensics

Reverse engineering

Communications

AI in security

Education

BA/BS in CS or related field

Tools

Bro/Zeek

Suricata

Malware analysis tools

Job description

CrowdStrike is seeking a highly motivated principal consultant to lead incident response engagements and drive forensic investigations across Windows, Mac, and Linux. You will hunt for adversaries, conduct intrusion investigations with legal counsel, and deliver high-quality reports to executives and clients.

The role emphasizes experience in incident response, network forensics, and malware analysis, with opportunities to share thought leadership through CrowdStrike channels.