Senior Cloud Security Consultant

CrowdStrike Holdings, Inc.; United States; Remote; USD 140,000 - 195,000; Full time

Benefits offered by this job

Market-leading compensation

Wellness programs

Generous vacation and holidays

Parental and adoption leave

Professional development opportunities

Job summary

CrowdStrike is seeking a Cloud Red Team Blue Team specialist to support customers' SOC/IR teams in real-time threat hunting and incident response while a cloud-focused adversary-emulation partner conducts exercises in customer environments.

You will manage engagements end-to-end, identify long-term enhancements to the CRTBT offering, and help clients detect, stop, and recover from cloud-based breaches with a strong focus on AWS, Azure, Entra ID/M365 and GCP.

Qualifications

• 5+ years in blue team consulting services or MSSP roles with cloud platforms (AWS, Azure, GCP).
• 2+ years proactive security assessments, incident response, or Purple Team exercises.
• 5+ years in cybersecurity with hands-on IR, threat hunting, cloud engineering, etc.
• Experience scripting and automation to support blue team operations and workflows.
• Proven client management and project management experience.
• Hands-on security program experience across endpoints, cloud, network, threat intel, or SOC.

Responsibilities

• Support customers in real-time threat hunting, detection engineering, and incident response during cloud-focused adversary emulation.
• Manage engagements from kickoff to report delivery and drive enhancements to the CRTBT offering.

Skills

Blue team consulting

MSSP experience

Cloud security

Threat hunting

Incident response

Automation scripting

Client management

Project management

AI in security

Strong communication

Job description

CrowdStrike is seeking a Cloud Red Team Blue Team specialist to support customers' SOC/IR teams in real-time threat hunting and incident response while a cloud-focused adversary-emulation partner conducts exercises in customer environments.

You will manage engagements end-to-end, identify long-term enhancements to the CRTBT offering, and help clients detect, stop, and recover from cloud-based breaches with a strong focus on AWS, Azure, Entra ID/M365 and GCP.