2025-04-17
CrowdStrike, Inc.
Other
/yr
employee
contract
Sunnyvale
California
94086
United States
CrowdStrike, Inc.
Full time
R21958
About the Role:
We are seeking a highly-skilled, experienced Senior Network Threat Response Specialist to join our Falcon Complete Managed Detection and Response (MDR) team. The successful candidate will focus on enabling and supporting our security analysts with specialized knowledge of network security solutions (NGFW, NDR, IPS). As a Senior Threat Response Specialist, you will play a crucial role in enhancing our detection and response capabilities, providing expert guidance on network security issues, and ensuring our team is equipped to handle network-based threats effectively.
Provide expert support: Serve as the go-to expert on network security within the Falcon Complete team, providing guidance and support to security analysts on network telemetry related incidents; collaborate with security analysts during incident investigations, providing expert insight into network-based threat vectors and remediation strategies.
Develop response playbooks: Curate knowledge base of investigation and remediation strategies for network intrusion technologies; drive development for SOAR automation and human led response actions.
Threat Detection enablement: Assist in developing and fine-tuning detection mechanisms and use cases for network security solutions, leveraging NGFW, IDS/IPS, and NDR tools and telemetry.
Enable knowledge sharing: Educate and mentor security analysts on network security solution best practices, emerging threats, and effective response techniques.
Minimum of 5 years of experience in network security, with at least 3 years focused on supporting Incident Response, security operations, or MDR teams.
Advanced proficiency with network security solutions (i.e., Palo Alto Networks, Fortinet, Cisco, Corelight, ExtraHop, etc.).
Experience with network protocol analyzer tools to conduct threat hunting or threat research.
Experience writing detection content for NDR/IDS/IPS tools.
Deep understanding of how attack vectors manifest in network telemetry and how to investigate them.
Experience with SIEM and SOAR technologies.
Knowledge of automation tools and scripting languages (e.g., Python, PowerShell).
#LI-Remote
#LI-RC2
CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.
CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements.
If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at recruiting@crowdstrike.com for further assistance.
Find out more about your rights as an applicant.
CrowdStrike participates in the E-Verify program.
Notice of E-Verify Participation
PI268109220
