Lead Incident Response Manager – Remote

CrowdStrike Inc.; Salem (OR); Remote; USD 140,000 - 195,000; Full time

Benefits offered by this job

Professional development opportunities

Wellness programs

Paid parental leave

Equity awards

Generous vacation & holidays

Job summary

CrowdStrike Inc. is seeking an Incident Response Manager to lead complex investigations and guide clients through containment, remediation, and post-incident improvements. This role requires coordinating across a matrixed consulting environment, mentoring junior analysts, and communicating findings to executives.

The position emphasizes advancing security maturity using AI-driven analytics, with opportunities for public thought leadership and client-facing engagements in a remote-first setting.

Qualifications

• Experience leading incident response investigations for organizations and managing incident response engagements.
• Strong background using forensic analysis tools to determine the extent and scope of compromises.
• Deep knowledge of network protocols and ability to analyze network logs with tools like Bro/Zeek or Suricata.
• Ability to understand static and dynamic malware capabilities through reverse engineering.
• Ability to create tactical and strategic remediation plans for compromised organizations.
• Solid understanding of secure network architecture and performing network operations.
• Experience with AWS/Azure/GCP incident response methodologies.
• Proven track record of using AI to enhance decision-making and streamline workflows.

Responsibilities

• Lead incident response engagements and drive objective scoping with clients.
• Communicate effectively with executives on forensics and malware analysis topics.
• Develop new methods to hunt for bad actors across large data sets.
• Oversee intrusion investigations with external counsel as needed.
• Coach and mentor junior analysts in host and network forensics across Windows, Mac, and Linux.
• Provide actionable recommendations to improve security posture during and after incidents.
• Produce high-quality reports, presentations, and findings for stakeholders including management, regulators, and legal counsel.
• Demonstrate thought leadership via blogs, CrowdCasts, and public talks.

Skills

Team leadership

Incident response

Computer forensics

Network forensics

Reverse engineering

Incident remediation

Network operations & engineering

Cloud incident response

AI-enabled decision making

Tools

Bro/Zeek

Suricata

Job description

CrowdStrike Inc. is seeking an Incident Response Manager to lead complex investigations and guide clients through containment, remediation, and post-incident improvements. This role requires coordinating across a matrixed consulting environment, mentoring junior analysts, and communicating findings to executives.

The position emphasizes advancing security maturity using AI-driven analytics, with opportunities for public thought leadership and client-facing engagements in a remote-first setting.