CR
CrowdStrike
★ FEATURED PINNED
Remote
Senior Incident Response Consultant
Job Description & Details
About the Role
As a Senior Incident Response Consultant at CrowdStrike, you will lead high-profile investigations into nation-state attacks, ransomware incidents, and sophisticated intrusions for Fortune 500 clients worldwide.
Key Responsibilities
- Lead digital forensics and incident response (DFIR) engagements from initial triage to remediation.
- Analyze host-based artifacts, network telemetry, memory dumps, and Falcon EDR logs.
- Craft detailed executive and technical incident response reports outlining root cause, attacker dwell time, and actionable hardening steps.
- Interface directly with client CISOs, legal counsel, and technical leads during active crises.
Qualifications & Requirements
- 5+ years of dedicated DFIR or security operations experience.
- Deep expertise in Windows/Linux enterprise internals, NTFS/ext4 forensic artifacts, and memory analysis.
- Experience with SIEM/EDR platforms (CrowdStrike Falcon, Splunk, Sentinel).
- Relevant certifications preferred: GIAC GCIH, GCFA, GNFA, or EnCE.
Benefits
- Competitive base salary + equity compensation.
- Comprehensive medical, dental, and vision insurance.
- Unlimited flexible paid time off (FTO).
- Annual home office and professional development stipends.
Target Domains & Tools
Interested in this role at CrowdStrike?
Applications go directly through the official employer portal.