Remote Incident Response Principal Consultant

CrowdStrike Holdings, Inc.; United States; Remote; USD 140,000 - 195,000; Full time

Benefits offered by this job

Remote work

Professional development opportunities

Paid time off

Equity grants

Health insurance

401k

Job summary

CrowdStrike is seeking a highly motivated Incident Response Principal Consultant (Remote) to lead complex incident investigations for Fortune-1000 clients, delivering forensics, containment strategies, and actionable guidance.

You will mentor junior staff, communicate findings to executives, and contribute to thought leadership through blogs and public speaking, with travel up to 30% as needed.

Qualifications

• Experience leading incident response investigations for organizations with threats like APTs.
• Background in forensic analysis to determine scope of compromise.
• Knowledge of network protocols and ability to analyze network logs.
• Ability to communicate findings to clients and stakeholders.

Responsibilities

• Lead incident response engagements for customers.
• Develop new methods to hunt for attackers across large data sets.
• Produce high-quality written and verbal reports and recommendations.
• Demonstrate thought leadership through public speaking and blogs.

Skills

Team leadership

Incident Response

Computer Forensic Analysis

Network Forensic Analysis

Reverse Engineering

Incident Remediation

Network Operations and Architecture/EE

Cloud Incident Response

Communications

AI technologies in IR

Education

BA/BS or MA/MS in CS or related field

Tools

Bro/Zeek

Suricata

Job description

CrowdStrike is seeking a highly motivated Incident Response Principal Consultant (Remote) to lead complex incident investigations for Fortune-1000 clients, delivering forensics, containment strategies, and actionable guidance.

You will mentor junior staff, communicate findings to executives, and contribute to thought leadership through blogs and public speaking, with travel up to 30% as needed.