Skip to content

CrowdStrike

United Kingdom - Remote; United Kingdom

Consultant, Cloud Incident Response (Remote)

Posted 13 days ago

Level
Senior
Experience
5+ years
Work style
Remote
Full-time
Area
Defence & SOC

At a glance

The role in plain English

This role involves leading and participating in cloud incident response and security consulting engagements for clients. It suits professionals with strong experience in public cloud infrastructure and incident response, who are comfortable mentoring others and contributing to internal tool development. Day-to-day tasks include investigating cloud security incidents, conducting assessments, collaborating with team members, and providing technical guidance to clients and colleagues.

What you'll do

  • Investigate and remediate cloud security incidents
  • Conduct cloud security assessments and provide technical guidance
  • Analyze and report on cloud security architectures
  • Collaborate with team to develop cloud security practice
  • Mentor junior team members

What they're looking for

Essential

  • Experience administering AWS, Azure, or GCP environments
  • Incident response experience in cloud settings
  • 5+ years of related work experience
  • 2+ years as Security Architect or Engineer
  • Proficiency in scripting or compiled languages

Nice to have

  • Experience with systems automation platforms
  • Knowledge of OAuth, OpenID authentication
  • Experience with CSPM tools
  • Experience with enterprise applications

Core skills

  • AWS
  • Azure
  • GCP
  • Incident response
  • Python
  • PowerShell
  • Cloud security
  • Automation

The shape of the job

Technical depth

4/5

FoundationalSpecialist

Pace

3/5

SteadyFast-moving

Ownership

4/5

GuidedSelf-directed

Teamwork

4/5

Heads-downHighly collaborative

Cyberend's reading of the listing, not the employer's own scores.

Application toolkit

Make your application count

See which requirements your CV meets and what is missing.

Your CV is used for this answer only and never stored.

Questions to prepare for

  1. 01Describe your approach to investigating a cloud-based security incident.
  2. 02How do you assess the security posture of a cloud environment?
  3. 03What scripting languages have you used for cloud automation and incident response?
  4. 04How do you mentor junior consultants in technical and client-facing skills?

About CrowdStrike

CrowdStrike provides cybersecurity services and solutions to organisations across various industries, focusing on cloud and AI-driven security.

Full job descriptionAs published by CrowdStrike

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role:

The Cloud Security Consultant will participate in and lead consulting engagements including Incident Response, Cloud Security Assessments, and other engagement types.

This consultant is expected to share his/her extensive knowledge of public cloud infrastructure security with fellow consultants, support the development of internal and open source tools and service offerings, and support non-cloud incident response engagements as circumstances require.

What You'll Do:

  • Assist in investigation and remediation of security incidents and issues.
  • Conduct security assessments to identify areas of risk and provide specific technical guidance to help ensure any gaps are remediated.
  • Analyze, report on, and provide feedback on cloud and cloud/hybrid security architectures for CrowdStrike Services’ clients and internal projects.
  • Collaborate with other members of the CrowdStrike Services cloud team to develop and grow our Cloud Security practice.
  • Raise the awareness level of cloud security in the CrowdStrike Services organization.
  • Provide requirements for critical cloud projects and initiatives.
  • Conduct in-depth research on current cloud security tools, techniques and best practices and technologies to remain at the forefront of offensive and defensive capabilities.
  • Develop and mentors junior team members.

What You'll Need:

  • Experience in administration of Amazon Web Services (AWS), Azure, or Google Cloud Platform (GCP) cloud environments.
  • Experience conducting Incident Response investigations in the cloud.
  • College degree or equivalent and 5+ years of related work experience are required.
  • 2+ years of experience as a Security Architect and/or Engineer are required.
  • 2+ years of experience with Cloud platforms such as AWS, Azure, or GCP is required.
  • Experience with systems automation platforms and technologies is preferred.
  • Experience architecting solutions in AWS, Azure, or GCP is required.
  • Proficiency in one or more scripting or compiled languages - Python, Ruby, C#, PowerShell, Golang - is required.
  • Working knowledge of common and industry standard cloud-native/cloud-friendly authentication mechanisms (OAuth, OpenID, etc.) a plus.
  • Experience with service-oriented architecture for cloud-based services is a plus.
  • Experience working with cloud security and governance tools, Cloud Security Posture Management (CSPM) is a plus.
  • Experience with enterprise applications (architecture, development, support, and troubleshooting) is a plus.
  • Open to remote/office locations.
  • Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.

Bonus Points:

  • Provide clear, consistent, regular communication with all project stakeholders at all levels, including presentations to senior management, creating agendas and status update presentations.
  • Builds a great working relationship with team members and client teams.

#LI-JP2

#LI-Remote

Benefits of Working at CrowdStrike:

  • Market leader in compensation and equity awards
  • Comprehensive physical and mental wellness programs
  • Competitive vacation and holidays for recharge
  • Paid parental and adoption leaves
  • Professional development opportunities for all employees regardless of level or role
  • Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
  • Vibrant office culture with world class amenities
  • Great Place to Work Certified™ across the globe

CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.

CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements.

If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at recruiting@crowdstrike.com for further assistance.

  • USA - Arlington, VA; United States of America · Hybrid

    Intern will work with CrowdStrike's Red Team to learn and perform offensive security tasks such as penetration testing and adversary simulation. This is a paid summer internship for students or recent graduates in the United States.

    Graduate & entry levelRed teamingPenetration testingScripting
  • USA - New York, NY and 4 more · Hybrid · $160k to $260k

    Lead product management for CrowdStrike's data security platform, focusing on large-scale distributed systems. Requires experience in product management for security products and delivering customer-centric solutions.

    SeniorProduct managementData securityCloud security
  • CrowdStrike

    Posted 4 days ago

    Red Team Services Sr. Consultant (Remote)

    USA - Remote; United States of America · $115k to $165k

    Conduct red team engagements simulating real-world threat actors for clients, including planning, execution, and reporting. Requires experience with red teaming and familiarity with the MITRE ATT&CK framework.

    SeniorRed TeamingPenetration testingMetasploit
  • US - Remote · $230.4k to $500k

    Lead and conduct complex security investigations involving internal and external threats, including technical analysis of hardware, software, and supply chain risks. Requires a technical background and experience with multi-domain security cases.

    SeniorThreat huntingDigital forensicsSIEM

Hand-picked cyber jobs, every morning.

Cyberend Daily sends a graduate, mid-level, senior and leadership role each day, alongside the security news worth knowing. Free.

Free beginner roadmap PDF when you join · No spam · Unsubscribe anytime