Strategic Advisory Services Consultant (Remote)

Summary

CrowdStrike is a global cybersecurity company that protects organizations through an AI-native security platform. The Strategic Advisory Services Consultant delivers cybersecurity advisory engagements, assesses and develops security and incident response programs, creates exercise scenarios, prepares client-facing reports and recommendations, and contributes to cybersecurity thought leadership.

Responsibilities

• Contribute to the delivery of large and complex strategic advisory service engagements, engaging with management-level individuals across a wide range of industry segments
• Assess and develop cybersecurity and incident response programs in a proactive fashion to help mature the security posture of organizations prior to an incident
• Develop cutting-edge scenarios to help customers exercise the full range of their response capabilities
• Produce and ensure delivery of high-quality written and verbal reports, presentations, recommendations, and findings to customer management
• Identify and address emerging trends in cybersecurity, drawing on both government and private sector perspectives
• Contribute thought leadership and experiences to internal programs and teams

Skills

• Successful candidates will have at least 2-6 years of experience in one or more of the following areas:
• You've held leadership positions and owned relationships with organizational executives as a management or technical consultant. You've worked on a range of infosec and IT issues, including both technical cyber security (applying controls, improving architectures, etc.) and operational cyber security (organizational alignment, cyber policy review, etc.)
• You've personally contributed to the development, management, and implementation of a security program, helping organization build, enhance, or recalibrate their plans for a successful future-leaning security program. This may include aspects of developing a SOC, CSIRT, Fusion Center, or several security initiatives that support a centralized security function
• You've held leadership or key delivery positions in organizations or on teams that focus on organizational security (such as SOCs, IR teams, etc.). You understand cybersecurity from a practitioner standpoint, and importantly, you also understand how to consolidate and communicate results to senior leaders
• You've helped businesses address a range of risks, including cyber risks, across their organization. You're familiar with how organizational risk frameworks are developed, and you have experience helping organizations improve and apply their risk frameworks to address cyber risks
• You've been responsible for developing new policies or enhancing existing policies that inform how private or government organization performs and manages its various cyber security activities. You have played a key role in developing policies, plans, and/or playbooks focusing on cyber security activities, and have ideally been part of the process of transitioning these plans into practice within an organization
• You have significant experience helping government organizations, or entities that work closely with governments, refine cyber security priorities and communicate clearly about these priorities. You are highly experienced in working across technical and non-technical stakeholders in an organization to develop defensible, actionable priorities and plans for improving cyber security
• Exceptional written and verbal communications skills, specifically in fast-paced professional environments
• Demonstrated ability to establish and maintain positive working relationships with a wide range of customers and team members
• Capable of completing complex tasks involving strategic analysis and development, without supervision
• Desire to grow and expand cyber aptitude, technical awareness, and soft skills
• Strong time management skills, including the ability to complete tasks for multiple projects simultaneously
• Consistent positive work environment and attitude
• Ability to travel to engage with clients, up to 30% of the time, often on less than three weeks' notice
• Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes
• Experience, drive, and results are key and advanced degrees are not required
• Successful candidates coming from an academic background will likely have a Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, Math, Information Security, Information Assurance, Information Security Management, Cybersecurity, Cybersecurity Policy, Public Policy, Intelligence Studies, or a related discipline
• Applicants without a degree but with relevant military or work experience and/or training will be considered, and should apply their previous experience to the qualification areas above
• Additional consideration for Master's degrees

Qualifications

Must Haves

• Successful candidates will have at least 2-6 years of experience in one or more of the following areas:
• you've held leadership positions and owned relationships with organizational executives as a management or technical consultant. You've worked on a range of infosec and IT issues, including both technical cyber security (applying controls, improving architectures, etc.) and operational cyber security (organizational alignment, cyber policy review, etc.)
• you've personally contributed to the development, management, and implementation of a security program, helping organization build, enhance, or recalibrate their plans for a successful future-leaning security program. This may include aspects of developing a SOC, CSIRT, Fusion Center, or several security initiatives that support a centralized security function
• you've held leadership or key delivery positions in organizations or on teams that focus on organizational security (such as SOCs, IR teams, etc.). You understand cybersecurity from a practitioner standpoint, and importantly, you also understand how to consolidate and communicate results to senior leaders
• you've helped businesses address a range of risks, including cyber risks, across their organization. You're familiar with how organizational risk frameworks are developed, and you have experience helping organizations improve and apply their risk frameworks to address cyber risks
• you've been responsible for developing new policies or enhancing existing policies that inform how private or government organization performs and manages its various cyber security activities. You have played a key role in developing policies, plans, and/or playbooks focusing on cyber security activities, and have ideally been part of the process of transitioning these plans into practice within an organization
• you have significant experience helping government organizations, or entities that work closely with governments, refine cyber security priorities and communicate clearly about these priorities. You are highly experienced in working across technical and non-technical stakeholders in an organization to develop defensible, actionable priorities and plans for improving cyber security
• Exceptional written and verbal communications skills, specifically in fast-paced professional environments
• Demonstrated ability to establish and maintain positive working relationships with a wide range of customers and team members
• Capable of completing complex tasks involving strategic analysis and development, without supervision
• Desire to grow and expand cyber aptitude, technical awareness, and soft skills
• Strong time management skills, including the ability to complete tasks for multiple projects simultaneously
• Consistent positive work environment and attitude
• Ability to travel to engage with clients, up to 30% of the time, often on less than three weeks' notice
• Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes
• Experience, drive, and results are key and advanced degrees are not required
• Successful candidates coming from an academic background will likely have a Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, Math, Information Security, Information Assurance, Information Security Management, Cybersecurity, Cybersecurity Policy, Public Policy, Intelligence Studies, or a related discipline
• Applicants without a degree but with relevant military or work experience and/or training will be considered, and should apply their previous experience to the qualification areas above

Nice to Haves

• Additional consideration for Master's degrees

Benefits

• Equity awards
• Comprehensive physical and mental wellness programs
• Competitive vacation and holidays for recharge
• Paid parental and adoption leaves
• Professional development opportunities for all employees regardless of level or role
• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
• Vibrant office culture with world class amenities
• Eligibility for bonuses
• Equity grants
• Health insurance
• 401k
• Paid time off