Remote Cloud Red/Blue Team Engineer

CrowdStrike Holdings, Inc.; United States; Remote; USD 140,000 - 195,000; Full time

Benefits offered by this job

Equity awards

Wellness programs

Paid time off

Parental leave

Professional development

Employee networks

Job summary

CrowdStrike, a global cybersecurity leader, seeks a Cloud Red Team/Blue Team professional to support customers' SOC/IR teams during real-time threat hunting and incident response. You will work with our CrowdStrike Blue Teamer on cloud-focused adversary emulation against client environments.

The role emphasizes engaging with clients to understand their cloud security controls across AWS, Azure, Entra ID, M365 and GCP, manage engagements end-to-end, and drive improvements in our CRTBT offering

Qualifications

• At least 5 years experience in blue team consulting or MSSP roles.
• Experience with one or more public cloud platforms (AWS, Azure, GCP).
• 5+ years cybersecurity industry experience overall, including incident response or threat hunting.
• Experience scripting, automation, and tooling development to support blue team operations.

Responsibilities

• Lead CRTBT engagements as Blue Teamer to support SOC/IR in real-time threat hunting and incident response.
• Collaborate with customers to understand cloud security controls and detection capabilities for real-time engagement support.
• Manage engagements from kickoff through report delivery, identifying long-term enhancements to improve adversary emulation and detection.

Skills

Blue team

MSSP

Public cloud

AWS

Azure

GCP

Scripting

Automation

Client management

Project management

Threat hunting

Job description

CrowdStrike, a global cybersecurity leader, seeks a Cloud Red Team/Blue Team professional to support customers' SOC/IR teams during real-time threat hunting and incident response. You will work with our CrowdStrike Blue Teamer on cloud-focused adversary emulation against client environments.

The role emphasizes engaging with clients to understand their cloud security controls across AWS, Azure, Entra ID, M365 and GCP, manage engagements end-to-end, and drive improvements in our CRTBT offering