Principal Technical Strategist - NextGen (Remote)

CrowdStrike Inc.; Dover (DE); Remote; USD 180,000 - 275,000; Full time

Benefits offered by this job

Market-leading compensation

Equity grants

Health insurance

Paid time off

Professional development

Job summary

CrowdStrike Inc. is seeking a Product CTO-oriented leader to define and drive the NGSIEM product strategy for Next-Gen SIEM and log management. You will own capability roadmaps, data strategy, and AI integration within the Falcon platform, partnering with PM and Engineering to turn strategy into shipped features.

The role emphasizes cross-pillar integration, stakeholder engagement, and thought leadership in cybersecurity, with a strong focus on platform consolidation and customer value delivery.

Qualifications

• Bachelor's degree or higher in a relevant field.
• Minimum 5 years in cybersecurity or log management with security visibility
• Experience shipping product capabilities and turning strategy into shipped features

Responsibilities

• Define and own NGSIEM product strategy and roadmap.
• Drive NGSIEM capabilities across ingestion, detection, investigation, and automation.
• Anchor NGSIEM within the Falcon platform consolidation narrative.
• Shape cross-pillar integration and automation on top of NGSIEM.
• Engage stakeholders to inform market opportunities and product improvements.

Skills

AI integration roadmap

Data strategy

Product strategy

Cross-functional collaboration

AI technologies in security

Education

Bachelor's degree or higher

Tools

CQL (CrowdStrike Query Language)

LogScale

Job description

USA - Remote

Full time

R30436

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role:

Our Product CTO organization includes a team of Technical Strategy leaders that bring outstanding ideas, the ability to execute, and teamwork to a strategic, high future impact organization. The primary responsibility of this role is to define and drive the company's technical vision, product strategy, and platform narrative for our Next-Gen SIEM and Log Management products.

This role requires deep technical knowledge in AI, SIEM/SOAR, log management, and data analysis and a functional understanding of actual real-world deployments, extended use-cases, and customer motivations. The ideal candidate doesn't just advise on strategy: they define what we build, why, and in what order, and they articulate how NGSIEM anchors CrowdStrike's platform consolidation story. This role reports to the Product CTO.

What You’ll Do:

Product Strategy & Creation

• Define and own the NGSIEM product strategy , including capability roadmap, competitive positioning, and technical differentiation. Translate market signals, customer pain, and threat landscape shifts into concrete product bets with clear success criteria.

• Drive product definition for new NGSIEM capabilities across data ingestion, detection logic, investigation workflows, and response automation. Partner with PM and Engineering to write strategy briefs that become epics, not shelf-ware.

• Own the data strategy for NGSIEM: which sources to prioritize for native connectors, how to handle petabyte-scale ingestion economics, and where federated search vs. centralized storage creates the right customer trade-off.

• Define the AI integration roadmap for NGSIEM: where Charlotte AI accelerates analyst workflows (triage, case analysis, CQL generation, threat hunting), and where AI-native detection and automated response create step-function improvements over rule-based approaches.

• Work with Product Management and Engineering to make key decisions on short/medium term roadmap as well as long term multi-year strategy.

• Help develop frameworks for aggregating multiple sources of information to streamline and expedite data-driven decision making.

Platform Narrative & Cross-Pillar Integration

• Anchor NGSIEM within the Falcon platform consolidation narrative. Define how NGSIEM collapses the traditional SIEM + SOAR + log management + threat intel stack into a single platform experience, and articulate that story for analysts, CISOs, and the market.

• Drive cross-pillar integration strategy. Define how NGSIEM consumes and enriches data from Endpoint, Cloud Security, Identity Protection, and Exposure Management to deliver correlated detections that no standalone SIEM can match. Own the "better together" story with technical specificity.

• Shape the platform data flywheel narrative. Articulate how every Falcon module feeding data into NGSIEM makes detections better, and how NGSIEM insights flow back to improve prevention, posture, and response across the platform.

• Partner with NGSIEM, Fusion SOAR, Charlotte AI, and Falcon Foundry teams to define the automation and extensibility layer that sits on top of NGSIEM, ensuring the product strategy accounts for the full detect-investigate-respond lifecycle within the platform.

• Contribute to CrowdStrike's platform thought leadership. Represent the NGSIEM perspective in analyst briefings, customer advisory boards, and competitive positioning. Help tell the story of why a platform-native SIEM beats a bolt-on SIEM.

Market Intelligence & Stakeholder Engagement

• With your extensive cybersecurity background and your ability to think and operate at a strategic level, you will drive CrowdStrike's technical vision and strategy for Next-Gen SIEM.

• Engage in the development of CrowdStrike's long-range strategic vision, and facilitate the entry of new security technology concepts to market to position CrowdStrike as the thought leader for Cybersecurity.

• Engage with field sales, strategic accounts, customer success, and other stakeholders to research product ideas, pain points, obstacles, and market opportunities.

• Use stakeholder feedback to inform necessary improvements and adjustments to the product.

• Maintain an in-depth knowledge of the cybersecurity industry, competitors, and related developments, to ensure we continue to be innovative thought leaders.

• Provide support to the wider CTO organization including the Falcon Fund, Privacy & Cyber Policy, Data Science and Detection Architecture teams, as well as the broader CrowdStrike organization as needed.

What You’ll Need:

• Bachelor's degree or higher in a relevant field.

• Minimum 5 years of experience in the cybersecurity or log management market with heavy emphasis on security visibility and insights.

• Minimum of 5 years relevant work experience (ideal candidates will have experience in at least TWO of the following): sales engineer/pre-sales, competitive intelligence, solution architect, sales operations, product management, technical marketing, professional services, research & development, and technical support.

• Experience defining and shipping product capabilities (not just advising on them); demonstrated ability to turn strategy into shipped features.

• Understanding of platform economics: how data network effects, module attach rates, and consolidation pricing drive platform value.

• Familiarity with detection engineering pipelines, correlation rule frameworks, or content-as-code approaches.

• Hands‑on experience with products (either designing, evaluating/testing, or in production).

• Superior communication skills including experience presenting to senior & executive level management.

• Excellent people and project management skills to manage projects and interact/build rapport with staff, colleagues, cross‑functional teams and third parties.

• Proven experience utilizing AI technologies to enhance decision‑making, streamline workflows and processes, improve efficiency and drive business outcomes.

Bonus Points:

• Direct experience with customers (as a customer, or in a customer support or field role).

• Real world experience with AI, SIEM, SOAR or Log Management tools to do threat hunting, vulnerability detection, risk analysis or compliance validation.

• Experience articulating platform consolidation narratives to analysts (Gartner, Forrester, IDC) or in competitive displacement scenarios.

• Hands‑on experience with CrowdStrike Query Language (CQL), LogScale, or comparable query-time analytics at scale.

• Background in building or evaluating AI/ML-driven security automation (auto-triage, anomaly detection, LLM‑assisted investigation).

#LI-IL1

#LI-DG1

#LI-Remote

Benefits of Working at CrowdStrike:

• Market leader in compensation and equity awards

• Comprehensive physical and mental wellness programs

• Competitive vacation and holidays for recharge

• Paid parental and adoption leaves

• Professional development opportunities for all employees regardless of level or role

• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections

• Vibrant office culture with world class amenities

• Great Place to Work Certified™ across the globe

CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.

CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay‑offs, return from lay‑off, terminations and social/recreational programs--on valid job requirements.

If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at [e-mail] for further assistance.

Find out more about your rights as an applicant. (http://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12ScreenRdr.pdf)

CrowdStrike participates in the E-Verify program.

Notice of E-Verify Participation (https://www.e-verify.gov/sites/default/files/everify/posters/EVerifyParticipationPoster.pdf)

Right to Work

CrowdStrike, Inc. is committed to fair and equitable compensation practices. Placement within the pay range is dependent on a variety of factors including, but not limited to, relevant work experience, skills, certifications, job level, supervisory status, and location. The base salary range for this position for all U.S. candidates is $180,000 - $275,000 per year, with eligibility for bonuses, equity grants and a comprehensive benefits package that includes health insurance, 401k and paid time off.

For detailed information about the U.S. benefits package, please click here (http://crowdstrike.wd5.myworkdayjobs.com/crowdstrikecareers/page/a78c53e64ec61001f47d48a4699e0000) .

Expected Close Date of Job Posting is:12-20-2026

CrowdStrike was founded in 2011 to fix a fundamental problem: The sophisticated attacks that were forcing the world’s leading businesses into the headlines could not be solved with existing malware-based defenses. Founder George Kurtz realized that a brand new approach was needed — one that combines the most advanced endpoint protection with expert intelligence to pinpoint the adversaries perpetrating the attacks, not just the malware.

There’s much more to the story of how Falcon has redefined endpoint protection but there’s only one thing to remember about CrowdStrike: We stop breaches.