Remote Incident Response Principal Consultant: Lead IR Engagements

CrowdStrike Inc.; Salem (OR); Remote; USD 115,000 - 160,000; Full time

Benefits offered by this job

Market-leading compensation

Wellness programs

Career development

Parental leave

Flexible vacation

Employee networks

Vibrant culture

Job summary

CrowdStrike is seeking a Principal Consultant to lead incident response engagements and drive threat hunting across large data sets. You will work with clients to investigate breaches, conduct forensics, and deliver high-impact reports and recommendations.

The role requires leadership, deep IR expertise, and the ability to mentor teammates while traveling up to 30% of the time. A BA/BS in a related field is required.

Qualifications

• Experience leading incident response engagements for organizations.
• Background in computer forensics and threat investigations.
• Strong understanding of network protocols and log analysis.
• Ability to communicate findings clearly to executives and clients.
• Willingness to travel up to 30% of the time.

Responsibilities

• Lead incident response engagements for clients.
• Develop and apply new threat hunting methods over large data sets.
• Coordinate investigations with outside counsel.
• Perform host/network forensics on Windows, Mac, Linux.
• Produce high-quality reports and presentations for stakeholders.
• Contribute thought leadership via blogs and public speaking.

Skills

Team leadership

Incident Response

Computer Forensic Analysis

Network Forensic Analysis

Reverse Engineering

Incident Remediation

Network Operations

Cloud Incident Response

Communications

AI technologies

Education

BA/BS in Computer Science or related field

Tools

Bro/Zeek

Suricata

Job description

CrowdStrike is seeking a Principal Consultant to lead incident response engagements and drive threat hunting across large data sets. You will work with clients to investigate breaches, conduct forensics, and deliver high-impact reports and recommendations.

The role requires leadership, deep IR expertise, and the ability to mentor teammates while traveling up to 30% of the time. A BA/BS in a related field is required.