Remote Incident Response Lead Consultant

CrowdStrike, Inc.; Sunnyvale (CA); Remote; USD 115,000 - 160,000; Full time

Benefits offered by this job

Health benefits

Paid time off

Professional development

Remote-friendly culture

Job summary

CrowdStrike, Inc. is seeking a Principal Consultant to lead incident response engagements and drive investigations against the world's most advanced threats.

You will develop new hunting techniques and work closely with clients, counsel, and leadership to expose breaches and remediation opportunities. The role requires strong leadership, deep forensics expertise, cloud incident response familiarity, and the ability to communicate complex findings to executives and technical teams.

Qualifications

• Bachelor's degree in a related field or equivalent work experience.
• Experience leading incident response engagements and managing targeted threats.
• Background in computer and network forensic analysis for incident investigations.

Responsibilities

• Lead incident response engagements.
• Develop and use new methods to hunt for bad actors across large data sets.
• Work with outside counsel to conduct intrusion investigations.
• Perform host and network forensics across Windows, Mac, and Linux.
• Perform basic malware analysis.
• Produce high-quality reports and recommendations for stakeholders.
• Demonstrate thought leadership via blogs, CrowdCasts, and public speaking.

Skills

Team leadership

Incident response

Computer forensic analysis

Network forensic analysis

Reverse engineering

Incident remediation

Network operations

Cloud incident response

Communication

AI-driven decision making

Education

BA/BS in Computer Science/related field

Relevant work experience considered in lieu of degree

Tools

Bro/Zeek

Suricata

Job description

CrowdStrike, Inc. is seeking a Principal Consultant to lead incident response engagements and drive investigations against the world's most advanced threats.

You will develop new hunting techniques and work closely with clients, counsel, and leadership to expose breaches and remediation opportunities. The role requires strong leadership, deep forensics expertise, cloud incident response familiarity, and the ability to communicate complex findings to executives and technical teams.