Red Team Consultant (Remote, CAN)
CrowdStrike
As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We’re also a mission-driven company. We cultivate an inclusive culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.
About the Role:
The Red Team Consultant will perform dedicated Red Team activities simulating known threat actors, to help CrowdStrike customers determine the impact and likelihood of threat actors to accomplish objectives across the Kill Chain and MITRE ATT&CK Framework. The Red Team Consultant is expected to be able to coordinate with senior leadership, plan, execute assessments and assist the other CrowdStrike Services’ functions to help improve customers' security defense.
What You’ll Do:
Perform penetration assessments of operating systems, applications, databases and network infrastructure components to detect, enumerate threats.
Produce high-quality written and verbal reports, presentations, security-focused recommendations, and factual findings of results of Red Team activities to customer management.
Must be able to effectively communicate at all levels (executive leadership and technical support teams) within CrowdStrike.
Work with a diverse team and lead/assist in developing and improving an information security program and information security resources.
Provide guidance using specialized knowledge and toolsets to operational teams during enterprise wide crisis scenarios, e.g. large-scale production service outages, outside of the routine change management process.
Must be able to work as an technical operator on various types of penetration testing offerings with an OPSEC mindset.
What You’ll Need:
Minimum 3 years of experience in a Red Team/Penetration Testing activities is highly preferred.
Security community participation (conference speaker, tool development contributor etc.) is highly preferred.
Advanced experience with security assessment tools (Metasploit, NMAP, Cobalt Strike, Nessus, Burp Suite, etc.).
Comprehensive understanding of the security methodologies, technologies, and best practices.
Windows / Linux / UNIX / Mac operating systems.
Advanced experience with Networking components (routers, switches, load balancers, wireless access points, etc.).
Comprehensive knowledge of firewalls, proxies, mail servers and web servers.
Advanced experience with operational support for operating systems, applications and networks.
Advanced experience with Red Teaming (vulnerability/penetration testing/adversary emulation assessments).
Advanced experience in automation and scripting of applications and systems.
Desirable Certifications: OSCP, GPEN, OSCE, GCIH, GXPN.
Occasional travel may be required (<25%).
#LI-AC1
#LI-Remote
Benefits of Working at CrowdStrike:
Remote-friendly and flexible work culture
Market leader in compensation and equity awards
Comprehensive physical and mental wellness programs
Competitive vacation and holidays for recharge
Paid parental and adoption leaves
Professional development opportunities for all employees regardless of level or role
Employee Resource Groups, geographic neighbourhood groups and volunteer opportunities to build connections
Vibrant office culture with world class amenities
Great Place to Work Certified™ across the globe
CrowdStrike is proud to be an equal opportunity and affirmative action employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. Our approach to cultivating a diverse, equitable, and inclusive culture is rooted in listening, learning and collective action. By embracing the diversity of our people, we achieve our best work and fuel innovation - generating the best possible outcomes for our customers and the communities they serve.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at [email protected] for further assistance.
Find out more about your rights as an applicant.
CrowdStrike participates in the E-Verify program.