Remote Principal Incident Response Consultant

CrowdStrike Holdings, Inc.; Northern (KY); Hybrid; USD 115,000 - 160,000; Full time

Benefits offered by this job

Market-leading compensation

Comprehensive wellness programs

Generous vacation & holidays

Parental & adoption leaves

Professional development opportunities

Employee networks & volunteering

Vibrant office culture

Great Place to Work Certified

Job summary

CrowdStrike, Inc. is seeking highly motivated, self-driven incident response consultants who can lead engagements against the world’s most advanced attackers. You’ll develop new hunting methods, conduct intrusion investigations, and deliver high-impact findings to executives and clients.

Ideal candidates bring IR experience, strong leadership, and excellent communication. The role supports remote work and involves travel as needed.

Qualifications

• Experience leading incident response investigations in a consulting environment.
• Ability to conduct intrusion investigations and produce written/verbal findings.

Responsibilities

• Lead incident response engagements for client organizations.
• Develop and use new methods to hunt for bad actors across large datasets.
• Work with counsel to conduct intrusion investigations.
• Perform host and/or network-based forensics on Windows, Mac, and Linux.
• Perform basic malware analysis.
• Produce high-quality reports and presentations for stakeholders.
• Share thought leadership through public content and talks.

Skills

Incident Response

Team leadership

Forensic Analysis

Network Forensics

Reverse Engineering

Threat hunting

Communication

AI-enabled decision making

Education

Bachelor's or Master’s in CS/IS/related

Tools

Bro/Zeek

Suricata

Job description

CrowdStrike, Inc. is seeking highly motivated, self-driven incident response consultants who can lead engagements against the world’s most advanced attackers. You’ll develop new hunting methods, conduct intrusion investigations, and deliver high-impact findings to executives and clients.

Ideal candidates bring IR experience, strong leadership, and excellent communication. The role supports remote work and involves travel as needed.