Top Cybersecurity Jobs in New York City, NY

Leads a weekend-shift DFIR consulting team and incident response engagements. Responsibilities include triage, scoping, forensic and malware investigations, threat hunting, remediation planning, executive and customer communication, regulatory and legal reporting, and mentoring analysts across Windows, macOS, and Linux. The role also develops security methods, supports cloud incident response, contributes thought leadership, and may travel up to 30%.

Leads incident response consulting engagements, including triage, scoping, forensic and malware investigations, threat hunting, remediation planning, and executive communications. The role directs investigations with legal counsel, mentors junior analysts, develops security posture recommendations, produces reports and presentations, contributes industry thought leadership, and manages customer-facing response work. Candidates need incident response, computer and network forensics, reverse engineering, cloud response, team leadership, project management, and willingness to travel up to 30%.

Define and own the technical vision, product strategy, roadmap, data strategy, and AI integration for CrowdStrike’s Next-Gen SIEM and log management products. Translate customer, market, and threat intelligence into shipped capabilities; lead cross-platform integration across endpoint, cloud, identity, and exposure products; and articulate the platform consolidation narrative. Engage executives, customers, analysts, sales, engineering, and product teams while driving detection, investigation, response automation, and cybersecurity thought leadership.

Lead complex incident response engagements, conduct host and network forensics, investigate intrusions and malware, hunt advanced threats, develop remediation plans, and communicate findings to executives, regulators, legal counsel, and customers. The role also requires team leadership, project management, cloud incident response knowledge, thought leadership, and travel up to 30%.

Leads complex, high-severity cybersecurity investigations across endpoint, identity, email, network, and cloud environments. Performs forensic, malware, network, and threat analysis; develops remediation plans; investigates Microsoft 365 attacks; and improves detection and response through automation. Mentors analysts, creates training and SOP content, manages customer escalations, and represents CrowdStrike through thought leadership and external engagements.

Manage and enhance identity infrastructure operations in CrowdStrike’s federal cloud environments. Responsibilities include identity provider operations, application lifecycle management, access troubleshooting, security control compliance, automation, monitoring, alerting, tier 2/3 support, root cause analysis, stakeholder communication, and on-call support. The role focuses on IAM security, scalability, FedRAMP and DoD requirements, and collaboration with Engineering and IT teams.

Lead product strategy, roadmap, and delivery for Falcon Complete’s internal MDR tooling, including AI-powered investigation and triage, ticketing, case management, and analyst workbench systems. Partner with security operations, analysts, engineering, and data science teams to translate workflows into product requirements, prioritize automation, improve analyst productivity and response times, define success metrics, and enhance customer outcomes.

Conduct sophisticated threat hunting, dark web monitoring, and customer-specific cyber threat intelligence operations. Serve as a trusted customer advisor, research targeted threats, validate security controls using MITRE ATT&CK, prepare intelligence reports, and deliver briefings to stakeholders ranging from SOC analysts to CISOs. Collaborate across teams to develop solutions, respond to customer requests, and improve threat hunting services.

Lead technical marketing for Falcon Secure Access by creating demos, labs, workshops, and technical content that translate secure access, browser security, Zero Trust, and AI security capabilities into market-facing messaging, sales enablement, and go-to-market strategy. Collaborate cross-functionally to drive adoption and competitive differentiation.

Leads delivery of cybersecurity training across CrowdStrike technologies, manages technical instructors, and oversees coaching, performance, scheduling, budgets, reporting, and resource allocation. Partners with sales and internal teams to scope customer engagements, recommend training, and improve enablement and revenue outcomes. Serves as a technical training subject matter expert, develops courses, analyzes training effectiveness and KPIs, and communicates with executive and technical audiences. Requires cybersecurity expertise, training management experience, LMS and virtual delivery platform proficiency, project management, and occasional travel.