Delivery Manager, Incident Response Partner Services (Remote)

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn't changed - we're here to stop breaches, and we've redefined modern security with the world's most advanced AI-native platform. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We're always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role:

• Have you led teams through complicated incident response investigations?
• Have you managed and built trust with teams of incident responders?
• Are you comfortable with communicating about technical incident response findings to customer leadership, especially during high-pressure situations?
• Do you find yourself interested in and keeping up with the latest vulnerabilities and breaches?
• Are you self-motivated and looking for an opportunity to rapidly accelerate your skills?
• Do you crave new and innovative work that actually matters to your customer?
• Do you have an Incident Response or Information Security background that you're not fully utilizing?
• Are you a mentor who can naturally teach your colleagues new methods and approaches?
• Do you love working around like-minded, smart people who you can learn from on a daily basis?

• Oversee incident response engagements performed by CrowdStrike's partners
• Provide practical connections between partner responders and CrowdStrike's incident response practice
• Help ensure alignment between customers and CrowdStrike partners around investigation scope, objectives, and level of effort involved to complete objectives
• Support partners in effectively communicating with executives on the topics of forensics and malware analysis
• Help train partners on new methods to hunt for bad actors across large sets of data
• Effectively coordinate under the direction of outside counsel
• Coach and mentor partners on advanced methods of performing host and/or network-based forensics across Windows, Mac, and Linux platforms
• Help review and provide strategic, applicable, and feasible recommendations to help mature the security posture of organizations during and after an incident
• Review written and verbal reports, presentations, recommendations, and findings for key stakeholders, including customer management, regulators, and legal counsel, to ensure alignment with CrowdStrike quality standards
• Demonstrate industry thought leadership through blog posts, CrowdCasts, and other public speaking events

• Team leadership experience in a matrixed consulting environment
• Previous experience developing and managing partner relationships in a consulting environment, preferably involving incident response
• Incident Response: experience conducting or managing incident response investigations for organizations, investigating targeted threats such as the Advanced Persistent Threat, Organized Crime, and Hactivists
• Computer Forensic Analysis: a background using a variety of forensic analysis tools in incident response investigations to determine the extent and scope of compromise
• Network Forensic Analysis: strong knowledge of network protocols, network analysis tools like Bro/Zeek or Suricata, and ability to perform analysis of associated network logs
• Reverse Engineering: ability to understand the capabilities of static and dynamic malware analysis
• Incident Remediation: strong understanding of targeted attacks and able to create customized tactical and strategic remediation plans for compromised organizations
• Network Operations and Architecture/Engineering: strong understanding of secure network architecture and strong background in performing network operations
• Cloud Incident Response: knowledge in any of the following areas: AWS, Azure, GCP incident response methodologies

• Capable of reviewing technical investigation results for accuracy, consistency, and completeness
• Desire to grow and expand both technical and soft skills
• Strong project management skills
• Contributing thought leader within the incident response industry
• Ability to foster a positive work environment and attitude
• Ability to travel on short notice, up to 30% of the time

• Remote-friendly and flexible work culture
• Market leader in compensation and equity awards
• Comprehensive physical and mental wellness programs
• Competitive vacation and holidays for recharge
• Paid parental and adoption leaves
• Professional development opportunities for all employees regardless of level or role
• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
• Vibrant office culture with world class amenities
• Great Place to Work Certified™ across the globe