This Canadian-remote senior engineering role requires 6+ years of experience designing and implementing automation pipelines, agentic/LLM-enabled systems, and enterprise web services or data pipelines. The role involves building integrations across security tools, mentoring engineers, participating in on-call rotations, and working with technologies such as Golang, Python, JavaScript, Docker, Kubernetes, Kafka and Postgres.

CrowdStrike is hiring a Senior Incident Response Consultant to join Services engagements as an individual contributor performing intrusion investigations, host- and network-based forensics across Windows/macOS/Linux, threat hunting, malware analysis and reverse engineering, and cloud incident response (AWS/Azure/GCP). The role involves producing technical and executive reports, working with project leadership and legal counsel, and supporting remediation planning. Position is remote for candidates in Spain, Ireland, or the United Kingdom.

Lead and manage high-stakes incident response engagements and consulting teams, providing technical oversight, hands-on forensic analysis when needed, and clear communication to executives and legal counsel. Responsibilities include client onboarding and scoping, developing threat-hunting and investigative strategies across endpoints, networks, and cloud (AWS/Azure/GCP), producing reports, and mentoring consultants.

Lead and manage a weekend-shift incident response consulting team (4x10 schedule, Fri–Mon) for CrowdStrike Services. Responsibilities include technical leadership of investigations, client onboarding and scoping, executive and legal communication, mentoring and developing consultants, threat hunting and forensic analysis across endpoints, networks and cloud (AWS/Azure/GCP), and producing high-quality reports and recommendations. Base salary range for U.S. candidates: $140,000–$195,000 per year.

Responsible for overseeing partner-conducted incident response investigations, coordinating between CrowdStrike, partners, customers and outside counsel, training and mentoring partners on forensic methods across Windows/macOS/Linux, reviewing reports and recommendations, and driving project and process improvements. Role may require travel up to 30%.

The Delivery Manager, Incident Response Partner Services will manage and mentor partner incident responders, ensure alignment on investigation scope and objectives, review technical findings and reports, and support communication with executives, legal counsel, and regulators. The role requires experience in incident response, digital and network forensics, malware analysis, cloud incident response, partner relationship management, and project leadership; travel up to ~30% is expected.

CrowdStrike seeks a Senior Analyst for the Falcon Complete virtual SOC (US remote). The role leads high-severity, multi-customer incident investigations across endpoint, identity, email, network and cloud environments, conducts advanced EDR telemetry, forensic and malware analysis, develops and coordinates strategic remediation, builds detections and automation, mentors junior analysts, and engages in thought leadership. Requires deep experience in incident response, forensics, malware analysis, network analysis, identity platforms (e.g., Okta, Entra ID, AD), SIEM/log correlation, scripting (Python/PowerShell/Bash) and applying AI in security operations. Position follows a 4x10 schedule including one weekend day.

CrowdStrike is hiring a Senior Incident Response Consultant based in Canada (remote). The role involves leading incident response engagements, performing host and network forensics across Windows/macOS/Linux, basic malware analysis, threat hunting, cloud incident response (AWS/Azure/GCP), producing reports for stakeholders, and occasionally public thought leadership. Travel up to 30% may be required. Salary range: 100,000–165,000 CAD per year.

Individual contributor senior technical consulting role responsible for leading incident response engagements, performing advanced host and network forensics on Windows/macOS/Linux, advising organisations on threat actor activity, producing reports and presentations, mentoring junior team members, and demonstrating thought leadership. Candidates should have experience in incident response, computer and network forensic analysis, incident remediation, and familiarity with threat intelligence. Visa support is not available for this role.

CrowdStrike is hiring a Principal Consultant for Incident Response to lead engagements, perform host and network forensics across Windows/Mac/Linux, conduct malware analysis and threat hunting, produce technical and executive reports, and contribute thought leadership. Role may require up to 30% travel and targets U.S. candidates with a listed base salary range of $140,000–$200,000.

Work on foundational detection and response functions for the Falcon endpoint sensor within the Sensor Security Platform (SSP). Responsibilities include owning and modifying complex sensor detections, contributing to core sensor logic, writing code (including C++ and an internal asynchronous domain-specific language), testing, debugging, and collaborating with other engineering, research and product teams. Role is hybrid requiring 2–3 days on-site in Redmond, WA.

CrowdStrike’s 12-week Professional Services Red Team Internship (June 2–Aug 20, 2027) is a full-time, remote UK role (37.5 hrs/week) offering hands-on exposure to red team engagements, simulated exercises, and a project with the red team development group. Applicants must be in the penultimate year of an undergraduate programme in a relevant field, be eligible to work in the UK, and will undergo a full background check. Desired technical experience includes red teaming/pen testing toolsets (e.g., BloodHound, Cobalt Strike, Burp Suite, Impacket), Windows/AD and Linux environments, scripting/programming, virtual machine creation, and familiarity with networking and security methodologies.

CrowdStrike seeks a Japanese‑speaking Associate Security Analyst to work on the Falcon Complete team, performing incident detection and response across Windows, macOS, and Linux, basic malware analysis, forensic investigations, and remediation planning. Candidates should have 1–4 years related experience, strong communication and project management skills, fluency in Japanese (business to native, including writing), and may be located in Japan or Australia. Shift work (40 hours/week) is required; visa sponsorship is not available.

CrowdStrike CAO Elite Senior Analyst responsible for customer-focused threat hunting, tailored threat intelligence, dark web monitoring, delivering briefings and partnering across teams. Requires 5+ years' experience across incident response, threat hunting, cyber threat intelligence or dark web monitoring; familiarity with MITRE ATT&CK, cloud/SaaS security, AI tools, and presentation of findings.

CrowdStrike seeks an Associate Analyst for its Falcon Complete team to perform incident handling across Windows/Mac/Linux, basic malware analysis, forensic and network log analysis, develop detection/remediation processes, produce customer communications, and contribute to thought leadership. Requires 1–4 years' related experience and fluency in Japanese; visa sponsorship is not available.

Design and implement Golang/Python microservices and data pipelines for risk intelligence and exposure management. Work with streaming and batch frameworks (Spark, Flink, Kafka), cloud platforms (AWS preferred; Azure/GCP), databases (Cassandra, graph DBs), and ensure operational reliability; mentor engineers and drive architecture.

Remote US-based Senior IAM/Identity Infrastructure Operations Engineer for CrowdStrike. Responsible for managing identity provider operations and application lifecycle in GovCloud (US-Gov-1/US-Gov-2), ensuring FedRAMP/DoD compliance, implementing security controls, automating repetitive tasks, developing monitoring/alerting, and providing tier 2/3 support including participation in on-call rotation. Requires 6+ years' relevant experience (Master's with 6-7 years or Bachelor's with 8-11 years). Salary range for US candidates: $125,000 - $180,000 per year.

CrowdStrike is hiring a Platform Professional Services Senior Consultant to lead customer engagements for deployment, configuration, optimization, and operational support of the CrowdStrike Falcon platform and related applications. Responsibilities include technical implementation, troubleshooting, scripting using Falcon APIs, integrating CrowdStrike with customer tools, supporting Incident Response and Compromise Assessment teams, and delivering workshops. Role is remote for US candidates, may require up to 25% travel, and lists a U.S. base salary range of $100,000–$155,000 per year.

Deliver integration and professional services for Falcon Next-Gen SIEM and log management, act as trusted advisor to expand customer use cases, onboard and parse data, develop searches/dashboards, create integrations and automation using scripting and APIs, and provide feedback to product teams. Requires 2+ years working with SIEM/log management and experience with cloud providers, IT security functions, scripting languages and AI platform usage. Occasional travel (<25%).

CrowdStrike is hiring an Analyst I for its Falcon Complete virtual SOC to triage and respond to security alerts, analyze EDR telemetry and logs, investigate Microsoft 365 threats (including BEC and AITM), and support remediation. The role expects foundational knowledge in incident handling, MITRE ATT&CK, OS fundamentals (Windows/Linux/macOS), network analysis, identity platforms (Okta, Entra ID, AD), scripting (Python/PowerShell/Bash), and willingness to work a 4x10 hybrid schedule in PST/MST.