[Hiring] Red Team Principal Consultant @CrowdStrike

Role Description

The Principal Consultant will lead a team dedicated to performing Red Team activities simulating known threat actors, to help CrowdStrike customers determine the impact and likelihood of threat actors accomplishing objectives across the Kill Chain and MITRE ATT&CK Framework. The Principal Red Team Consultant is expected to coordinate with senior leadership, plan, and oversee execution of assessments, and assist other CrowdStrike Services’ functions to improve customers' security defense. This person should be capable of supporting, managing, and mentoring less experienced red team members.

What You'll Do

• Act as a primary contact for coordination of Red Team activities as well as coordinating and leading all penetration testing activities.
• Develop reporting including mitigation strategies of results of Red Team activities for both management and technical audiences.
• Effectively communicate at all levels (executive leadership and technical support teams) within CrowdStrike.
• Organize resources to perform penetration assessments of operating systems, applications, databases, and network infrastructure components to detect and enumerate threats.
• Work with the team and lead/assist in developing and improving an information security program and information security resources.
• Provide guidance using specialized knowledge and toolsets to operational teams during enterprise-wide crisis scenarios, e.g., large-scale production service outages, outside of the routine change management process.
• Work as an operator and project manager on various types of penetration testing offerings.

Qualifications

• Minimum 5 years of experience in Red Team/Penetration Testing activities is highly preferred.
• Minimum 1 year of experience in a leadership role is highly preferred.
• Security community participation (conference speaker, tool development contributor, etc.) is highly preferred.
• Advanced experience with Security Assessment Toolsets (Metasploit, NMAP, Cobalt Strike, Nessus, Burp Suite, etc.).
• Comprehensive understanding of security methodologies, technologies, and best practices.
• Experience with Windows, Linux, UNIX, and Mac operating systems.
• Advanced experience with networking components (routers, switches, load balancers, wireless access points, etc.).
• Comprehensive knowledge of firewalls, proxies, mail servers, and web servers.
• Advanced experience with operational support for operating systems, applications, and networks.
• Advanced experience with Red Teaming (vulnerability/penetration testing/adversary emulation assessments).
• Advanced experience in automation and scripting of applications and systems.
• Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes.
• Desirable Certifications: OSCP, GPEN, OSCE, GCIH, GXPN.
• Occasional travel may be required (<25%).

Requirements

• This role may require the candidate to periodically undergo and pass alcohol and/or drug test(s) during the course of employment.

Benefits

• Market leader in compensation and equity awards.
• Comprehensive physical and mental wellness programs.
• Competitive vacation and holidays for recharge.
• Paid parental and adoption leaves.
• Professional development opportunities for all employees regardless of level or role.
• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections.
• Vibrant office culture with world-class amenities.
• Great Place to Work Certified™ across the globe.