Remote Incident Response Delivery Lead

CrowdStrike Inc.; United States; Remote; USD 140,000 - 195,000; Full time

Benefits offered by this job

Health insurance

401k

Paid time off

Professional development opportunities

Volunteer opportunities

Job summary

CrowdStrike is seeking a highly motivated incident response manager to oversee forensic investigations conducted by trusted partners. You will coordinate with CrowdStrike leadership, partners, and customers to deliver high-quality results in high-stakes IR scenarios.

You will lead on cross-functional discovery, ensure alignment on scope and objectives, and train partners in new methods for hunting threats across large data sets.

Qualifications

• Experience leading incident response investigations or engagements.
• Experience developing and managing partner relationships in consulting contexts.
• Experience conducting or managing incident response investigations (e.g., APTs, organized crime, hacktivists).
• Background in computer forensics and use of forensic tools in IR investigations.

Responsibilities

• Oversee incident response engagements performed by CrowdStrike’s partners.
• Coordinate with CrowdStrike incident response leadership and partner/customer leadership.
• Review reports and ensure alignment with CrowdStrike quality standards.
• Provide strategic, feasible remediation recommendations during and after incidents.
• Coach partners on advanced host/network forensics across major OS.

Skills

Team leadership

Partner relationships

Incident Response

Forensic analysis

Network forensics

Reverse engineering

Incident remediation

Cloud incident response

AI-assisted decision making

Travel up to 30%

Education

BA/BS or MA/MS in CS, Engineering, Information Security

Tools

Bro/Zeek

Suricata

Job description

CrowdStrike is seeking a highly motivated incident response manager to oversee forensic investigations conducted by trusted partners. You will coordinate with CrowdStrike leadership, partners, and customers to deliver high-quality results in high-stakes IR scenarios.

You will lead on cross-functional discovery, ensure alignment on scope and objectives, and train partners in new methods for hunting threats across large data sets.