Principal Consultant - Red Team Blue Team (Remote)

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We’re also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role:

You will lead Red Team Blue Team (Purple Team) engagements where you will support the customer’s SOC/IR team in threat hunting and custom detection creation activities as the CrowdStrike Red Team performs tools, tactics, and procedures (TTPs) emulating adversaries. You will work closely with customers to understand existing controls and practices and make recommendations based on detection and response capabilities, as well as manage projects from kickoff call through to report delivery. Additionally, you will identify and implement long-term enhancements to the solution that will better assist clients to stop breaches.

What You’ll Do:

• Lead and execute Red Team Blue Team (Purple Team) engagements, coordinating between CrowdStrike Red Team and customer security teams

• Assess customer's existing security controls, detection capabilities, and incident response procedures

• Guide customer security teams in developing and implementing custom detection rules and threat hunting methodologies

• Analyze gaps in customer's people, processes, and technology to improve security posture

• Provide real-time coaching and feedback during exercises to enhance customer team's detection and response capabilities

• Document findings, create detailed technical reports, and present recommendations to stakeholders

• Develop and maintain project plans, ensuring timely delivery of deliverables and milestones

• Conduct post-engagement reviews to measure effectiveness and identify areas for improvement

• Collaborate with internal teams to enhance service offerings and methodologies

• Share expertise through knowledge transfer sessions and capability building workshops

• Stay current with emerging threats, attack techniques, and defensive strategies

• Provide strategic guidance on security tool optimization and integration

• Support the development of custom scenarios based on customer objectives and industry-specific threats

What You’ll Need:

• 4-5 years experience providing cybersecurity and/or incident response consulting services

• 2-3 years conducting Red Team Blue Team or Purple Team exercises

• Experience in multiple security technologies, including various EDR and SIEM implementations

• Experience with building and growing strategic relationships with client mid-level managers and executives

• Experience in customer-facing project management with a keen eye toward customer service

• Experience implementing information security programs within domains such as endpoint security, cloud security, network security, threat intelligence, or security operations centers

• Demonstrated ability to excel in a fast-paced professional services environment and can balance competing priorities while still maintaining focus on details

• Proven track record in technical and creative problem solving coupled with the analytical expertise to provide quick resolution to problems

Additionally, all candidates must possess the following qualifications:

• Excellent client management skills

• Exceptional oral and written communication skills

• Strong business acumen

• Ability to foster a positive work environment and attitude

• Ability to travel up to 25% of the time

#LI-AC1

#LI-Remote

This role may require the c