Senior Incident Response Lead - Remote Cybersecurity Expert

CrowdStrike Inc.; Helena (MT); Remote; USD 115,000 - 160,000; Full time

Benefits offered by this job

Competitive compensation

Wellness programs

Vacation & holidays

Parental leaves

Professional development

Employee networks

Office culture

Great Place to Work Certified

Job summary

CrowdStrike, Inc. is seeking a senior incident response consultant to lead IR engagements and investigations for global clients. You will develop new hunting methods, perform forensics on multiple platforms, and help craft remediation plans. Excellent written and verbal communication to executives is required.

Candidates should have strong leadership, cloud IR knowledge, and a track record in handling advanced threats. Occasional travel may be required, with remote options available.

Qualifications

• Experience leading incident response engagements.
• Experience conducting IR investigations for organizations (APTs, organized crime, hacktivists).

Responsibilities

• Lead incident response engagements.
• Develop and use new methods to hunt for bad actors across large data sets.
• Conduct intrusion investigations under outside counsel.
• Perform host/network forensics on Windows, Mac, Linux.
• Conduct basic malware analysis.
• Deliver high-quality reports and recommendations to stakeholders.

Skills

Team leadership

Incident response

Digital forensics

Network forensics

Reverse engineering

Incident remediation

Network architecture

Cloud incident response

Executive communications

AI in security

Education

BA/BS in CS or related field

Tools

Bro/Zeek

Suricata

Job description

CrowdStrike, Inc. is seeking a senior incident response consultant to lead IR engagements and investigations for global clients. You will develop new hunting methods, perform forensics on multiple platforms, and help craft remediation plans. Excellent written and verbal communication to executives is required.

Candidates should have strong leadership, cloud IR knowledge, and a track record in handling advanced threats. Occasional travel may be required, with remote options available.