Skip to content

CrowdStrike

USA - Remote; United States of America

Threat Emulation & Exposure Principal Consultant (Remote)

Posted 6 days ago · closes 1 January

Level
Senior
Experience
5+ years
Work style
Remote
Full-time
Pay
$140k to $200k

At a glance

The role in plain English

This is a remote principal consultant role focused on threat emulation and exposure management for CrowdStrike's US clients. The position involves delivering technical and advisory services in red teaming, vulnerability management, and risk assessment using CrowdStrike's platforms and other tools. The role suits experienced penetration testers or security consultants who are comfortable with customer-facing work, mentoring, and using AI-driven security technologies.

What you'll do

  • Coordinate and deliver risk exposure and vulnerability testing for customers
  • Refine and present technical outputs for management and technical audiences
  • Document and communicate recommendations to improve technical capabilities
  • Mentor and support junior team members

What they're looking for

Essential

  • At least 5 years in penetration testing or application security
  • Experience in vulnerability management and technical risk consulting
  • Advanced use of security assessment toolsets
  • Strong understanding of security methodologies and best practices

Nice to have

  • Security community participation
  • Experience with generative AI in security operations
  • Advanced automation and scripting skills

Core skills

  • Penetration testing
  • Vulnerability management
  • Red teaming
  • Falcon
  • SafeMind
  • Metasploit
  • NMAP
  • Cobalt Strike

Certifications mentioned

  • OSCP
  • OSEP
  • GPEN
  • GXPN
  • CRTO

The shape of the job

Technical depth

4/5

FoundationalSpecialist

Pace

3/5

SteadyFast-moving

Ownership

4/5

GuidedSelf-directed

Teamwork

3/5

Heads-downHighly collaborative

Cyberend's reading of the listing, not the employer's own scores.

How the pay compares

A little below similar roles

Compared with 68 open senior roles in the US on Cyberend that state their pay.

This role

$140k to $200k a year

  • This role
  • Typical range ($167k to $216k)

Application toolkit

Make your application count

See which requirements your CV meets and what is missing.

Your CV is used for this answer only and never stored.

Questions to prepare for

  1. 01Describe your approach to continuous threat exposure management.
  2. 02How have you used AI or automation in security operations?
  3. 03Explain a time you communicated technical findings to a non-technical audience.
  4. 04What steps would you take to improve a client's vulnerability management process?

About CrowdStrike

CrowdStrike provides cybersecurity solutions and services to organisations across various industries using AI-driven platforms and tools.

Full job descriptionAs published by CrowdStrike

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role:

The Threat Emulation & Exposure Principal Consultant will operate service capabilities that continuously and agentically evaluate risk and exposures utilizing SafeMind, Falcon, and other frontier capabilities. Service delivery will concentrate on Exposure Management, Red Teaming, Vulnerability Management to proactively mitigate risk to customer IT infrastructure and environments. This customer facing role will be both technical and advisory in nature. Additionally, the ideal candidate will mentor and support junior team members.

What You'll Do:

  • Act as a primary contact for customer coordination and delivery of agentic and generative AI enabled risk exposure, vulnerability and penetration testing and mitigation strategies.
  • Refine, improve, and present outputs from SafeMind, Falcon, and other frontier capabilities for both management and technical audiences.
  • Support technical operations for service delivery by documenting and communicating recommendations to improve technical capabilities.
  • Must be able to effectively communicate at all levels (executive leadership and technical support teams) with customers and within CrowdStrike.

What You'll Need:

  • Minimum 5 years of experience in Penetration Testing or Application Security activities is highly preferred
  • Experience in Vulnerability Management, Continuous Threat Exposure Management and Technical risk consulting
  • Security community participation (conference speaker, tool development contributor, …) is highly preferred
  • Advanced experience with Security Assessment Toolsets (Metasploit, NMAP, Cobalt Strike, Nessus, Burp Suite, etc.)
  • Strong understanding of the security methodologies, technologies, and best practices
  • Experience with windows / Linux / UNIX / Mac operating systems
  • Advanced experience with Networking components (routers, switches, load balancers, wireless access points, etc.)
  • Experience with generative AI/Agentic technologies, including their use in security operations
  • Advanced experience in automation and scripting of applications and systems
  • Strong knowledge of firewalls, proxies, mail servers and web servers
  • Advanced experience with operational support for operating systems, applications and networks
  • Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.
  • Desirable Certifications: OSCP, OSEP, OSCP, GPEN, GXPN, CRTO
  • Occasional travel may be required (<25%)

#LI-AC1

#LI-Remote

This role may require the candidate to periodically undergo and pass alcohol and/or drug test(s) during the course of employment. Benefits of Working at CrowdStrike:

  • Market leader in compensation and equity awards
  • Comprehensive physical and mental wellness programs
  • Competitive vacation and holidays for recharge
  • Paid parental and adoption leaves
  • Professional development opportunities for all employees regardless of level or role
  • Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
  • Vibrant office culture with world class amenities
  • Great Place to Work Certified™ across the globe

CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.

CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements.

If you need assistance accessing or reviewing this website, submitting an application, requesting an accommodation, or providing feedback on the job posting, please contact us at recruiting@crowdstrike.com .

Find out more about your rights as an applicant.

CrowdStrike participates in the E-Verify program.

Notice of E-Verify Participation

Right to Work

CrowdStrike, Inc. is committed to fair and equitable compensation practices. Placement within the pay range is dependent on a variety of factors including, but not limited to, relevant work experience, skills, certifications, job level, supervisory status, and location. The base salary range for this position for all U.S. candidates is $140,000 - $200,000 per year, with eligibility for bonuses, equity grants and a comprehensive benefits package that includes health insurance, 401k and paid time off.

For detailed information about the U.S. benefits package, please click here .

Expected Close Date of Job Posting is:01-01-2027

  • USA - Arlington, VA; United States of America · Hybrid

    Intern will work with CrowdStrike's Red Team to learn and perform offensive security tasks such as penetration testing and adversary simulation. This is a paid summer internship for students or recent graduates in the United States.

    Graduate & entry levelRed teamingPenetration testingScripting
  • USA - New York, NY and 4 more · Hybrid · $160k to $260k

    Lead product management for CrowdStrike's data security platform, focusing on large-scale distributed systems. Requires experience in product management for security products and delivering customer-centric solutions.

    SeniorProduct managementData securityCloud security
  • CrowdStrike

    Posted 4 days ago

    Red Team Services Sr. Consultant (Remote)

    USA - Remote; United States of America · $115k to $165k

    Conduct red team engagements simulating real-world threat actors for clients, including planning, execution, and reporting. Requires experience with red teaming and familiarity with the MITRE ATT&CK framework.

    SeniorRed TeamingPenetration testingMetasploit
  • Dragos

    Posted 2 days ago

    Principal Penetration Tester

    United Kingdom · Remote

    Lead and conduct penetration testing and vulnerability assessments of ICS/OT networks for critical infrastructure clients, provide remediation guidance, and mentor team members. Requires deep technical expertise in OT security and prior penetration testing experience.

    SeniorOT penetration testingRed teamingMetasploit

Hand-picked cyber jobs, every morning.

Cyberend Daily sends a graduate, mid-level, senior and leadership role each day, alongside the security news worth knowing. Free.

Free beginner roadmap PDF when you join · No spam · Unsubscribe anytime