Incident Response Senior Consultant (Remote)

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you. About The Role: CrowdStrike is looking for a highly motivated, self-driven, bilingual Incident Response Consultant dedicated to making a difference in global security by protecting organizations against the most advanced attackers in the world. The right individual for our team should have excellent energy, drive and a real desire to help organisations respond to security incidents. The ability to work in a high stress, high pressure situation is a must as well as the ability to work together with the team around the APJ region. If you have forensics, incident response, and cyber security experience you are encouraged to apply. What You'll Do: Lead incident response engagements. Perform advanced host and/or network-based forensics across Windows, Mac, and Linux platforms. Advise organizations while they respond to threat actor activity. Produce high-quality written and verbal reports, presentations, recommendations, and findings to customer management. Present technical material to non-technical and technical audiences Demonstrate industry thought leadership through blog posts, CrowdCasts, and other public speaking events Lead scoping calls with English and Japanese-speaking employees and customers to gather information related to security incidents インシデント対応プロジェクトのリード Windows、Mac、Linux等の様々なプラットフォームに対するネットワークまたはホストのフォレンジック調査の実行 組織が攻撃者に対応するためのアドバイスの提供 プロジェクトにおける発見事項と推奨事項についての報告書の作成とプレゼンテーションによる報告 非技術者・技術者それぞれに対する技術的な内容の解説 ブログやCrowdCast、カンファレンスでの講演等を通じた業界のリーダーとしての活動 セキュリティインシデントの情報を収集するためのスコーピングコール（英語または日本語）に顧客とチームメンバーと共に参加し、コールをリード What You'll Need: Required: Incident Response: experience conducting or managing incident response investigations for organizations, investigating targeted threats such as the Advanced Persistent Threat, Organized Crime, and Hactivists. Computer Forensic Analysis: a background using a variety of forensic analysis tools in incident response investigations to determine the extent and scope of compromise. Network Forensic Analysis: strong knowledge of network protocols, network analysis tools, and ability to perform analysis of associated network logs. Incident Remediation: deep understanding of targeted attacks and able to create customized tactical and strategic remediation plans for compromised organizations. Threat Intelligence: familiarity with threat intelligence, adversary attribution and its application to Incident response Communication: exceptional written and oral communication skills. Ability to write and present technical content, including being able to present to senior executives. Fluent in both Japanese (native level speaker) and English, with excellent written and verbal communication skills in both languages Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes. インシデント対応:組織におけるインシデント調査の管理または実施。APT攻撃や組織的な犯罪、ハクティビスト等の標的型攻撃の調査 コンピューターフォレンジック解析:侵害範囲を特定するための様々なフォレンジックツールを使ったインシデント調査の経験 ネットワークフォレンジック解析:ネットワークログを解析するためのスキルやプロトコルやネットワーク解析ツールに関するナレッジ インシデントの復旧:標的型攻撃の理解と、侵害を受けた組織の戦略的な復旧案の策定 脅威インテリジェンス:脅威インテリジェンスや攻撃者の属性の理解と、インシデント対応への活用 コミュニケーション:文章または口頭でのコミュニケーションスキル。組織の経営層への説明を含む、技術的な内容の文章またはプレゼンテーションでの説明 日本語かつ英語での、文章または口頭でのコミュニケーションスキル Preferred: Scripting experience highly desirable (Python, Perl, Bash, PowerShell, etc.) Experienced user of CrowdStrike Falcon Experienced user of Splunk / LogScale / or other similar solutions Experience with host and network forensics Experience with basic static and behavioral malware analysis Education: Undergraduate degree or direct experience in information security, information systems, or computer science Applicable security certifications (GCIA, GCIH, GCFA, GNFA, etc.) #LI-JC2 #LI-Remote Benefits of Working at CrowdStrike: Market leader in compensation and equity awards Comprehensive physical and mental wellness programs Competitive vacation and holidays for recharge Paid parental and adoption leaves Professional development opportunities for all employees regardless of level or role Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections Vibrant office culture with world class amenities Great Place to Work Certified™ across the globe CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program. CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements. If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at [email protected] for further assistance.