Remote Incident Response Lead - Principal Consultant

CrowdStrike Inc.; Montpelier (VT); Remote; USD 140,000 - 195,000; Full time

Benefits offered by this job

Wellness programs

Vacation & holidays

Parental leave

Professional development

Employee networks

Office culture and amenities

Job summary

CrowdStrike is seeking a highly motivated, self-driven Principal Consultant to lead incident response engagements for major clients from a remote US location. You will hunt for adversaries, perform host and network forensics, and coordinate with counsel and regulators.

Applicants should have IR experience, malware analysis skills, and the ability to communicate findings clearly to executives and clients. Travel up to 30% is possible.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Security, or related field.
• Experience leading incident response engagements for organizations and stakeholders.
• Background in computer forensics and malware analysis in IR investigations.
• Strong knowledge of network protocols and network log analysis tools.
• Experience communicating findings to executives, clients, and legal/regulatory teams.

Responsibilities

• Lead incident response engagements and client interactions.
• Develop and apply methods to hunt for attackers across large data sets.
• Coordinate investigations with outside counsel and regulatory bodies.
• Perform host and network forensics across Windows, macOS, and Linux.
• Produce high-quality reports, presentations, and executive summaries.

Skills

Incident Response

Forensic Analysis

Network Forensics

Reverse Engineering

Cloud Incident Response

Leadership

Communication

Project Management

Education

BA/BS in Computer Science or Information Security

Tools

Bro/Zeek

Suricata

Job description

CrowdStrike is seeking a highly motivated, self-driven Principal Consultant to lead incident response engagements for major clients from a remote US location. You will hunt for adversaries, perform host and network forensics, and coordinate with counsel and regulators.

Applicants should have IR experience, malware analysis skills, and the ability to communicate findings clearly to executives and clients. Travel up to 30% is possible.