Detection Focused Senior Cloud Security Consultant - JAPAC (Remote)
CrowdStrike · Australia - Remote, WA ·
- Work mode
- Remote
- Seniority
- Senior
- Category
- Security
- Experience
- 10+ years
- Visa sponsorship
- Yes
CrowdStrike · Australia - Remote, WA ·
Senior cloud security consultant designs and implements detection logic for AWS/Azure environments, assesses misconfigurations, and advises high-profile clients on closing security gaps.
As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.
About the Role:
CrowdStrike is looking for a technically strong, self-directed cloud security professional to join our Professional Services team in the JAPAC region. This is a hands-on role for someone with genuine curiosity about cloud attack techniques and a drive to build the detection and defensive capability to counter them.
You'll work with complex, high-profile organisations across the region, helping them understand where they're exposed, sharpen their detection capabilities, and close the gaps that adversaries look for. The work demands both technical depth and client credibility, so you'll need to be effective at both.
What You'll Do:
Conduct cloud security assessments across a range of environments, focusing primarily on AWS and Azure: reviewing configurations, identity architectures, network exposure, and attack paths to surface the risks that actually matter.
Design and build detection logic and alerting for cloud control plane activity, identity-based threats, and misconfiguration-driven exposure across cloud-native and third-party security platforms.
Write automation to speed up assessment work, extract and correlate data across large datasets, and turn repeatable analysis into something the team can use again.
Partner with our Red Team during Purple Team exercises: testing customer detection and response capabilities and translating the gaps into concrete recommendations.
Collaborate with internal delivery teams to help turn assessment findings into detection content that's ready to deploy.
Produce clear, high-quality reports and presentations for technical and executive audiences.
Run client engagements from scoping through delivery, keeping stakeholders well-informed throughout.
Help push our service offerings forward through methodology development, tooling contributions, and public-facing thought leadership.
What You'll Bring:
Cloud Platforms
Strong practical experience with AWS and Azure, including identity, compute, networking, storage, serverless, and logging and monitoring services.
A solid grasp of cloud architecture patterns and where security assumptions tend to break down in practice.
GCP experience is a plus, but not a requirement.
Detection Engineering
Experience building detection content that works: writing queries, developing alerting logic, and cutting through noise in cloud-native and third-party SIEM/XDR environments.
A working knowledge of how threat actors operate in cloud environments, and the ability to translate that into detections that actually fire on the right things.
Cloud Security Configuration Analysis
Experience tracing how misconfigurations chain together into realistic attack paths — analysis that tells a coherent story rather than producing a list of isolated findings.
Familiarity with common cloud attack patterns: privilege escalation, lateral movement, persistence, and data exfiltration.
Automation and Tooling
Solid scripting ability in Python or equivalent, comfortable building tools to automate assessment tasks, work with large datasets, and extend existing frameworks.
Experience writing queries across platforms such as KQL, SPL, or cloud-native query engines.
Comfortable using AI tooling to sharpen and accelerate their work — whether for code generation, data analysis, query development, or documentation — with enough critical judgement to know when the output needs work.
Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.
Communication
Strong written and verbal communication in English. You can write a finding that prompts a CISO to act and explain a detection gap to an engineer without losing either audience.
Comfortable presenting to senior stakeholders and managing client relationships directly.
Able to adapt your approach across different business cultures. The JAPAC region spans markets with very different expectations around communication, hierarchy, and directness, and working effectively across that range is part of the job.
Additional language proficiency is a strong advantage, particularly Mandarin, Japanese, Hindi, or Thai.
Bonus Areas
Detection engineering experience in traditional enterprise environments: on-premises Active Directory, Windows endpoint telemetry, and classic Wintel infrastructure.
Cloud incident response experience (AWS, Azure, or M365).
Kubernetes and container security.
CI/CD pipeline security and DevSecOps practices.
Experience and Background:
We care about what you know and what you can do, not the specific path you took to get here. Strong candidates will have built real depth in cloud platforms and security over time — whether through years in dedicated security roles, a background in cloud engineering or DevOps that shifted toward security, or any other route that got them to the same place. What matters is that the knowledge is solid and the skills are demonstrable.
A bachelors degree or higher and 10+ years of work experience.
Cloud security certifications are a useful signal of hands-on platform knowledge. AWS Certified Security Specialty, AZ-500, and similar practitioner-level credentials are relevant. Broad governance and management certifications (CISSP, CISA, CISM, and similar) are not a focus for this role.
Why This Role:
The work is technically demanding, the clients are high-profile, and the team is sharp. You'll have room to develop your own tooling and methodology contributions and do work that has real impact at some of the region's most security-conscious organisations. It's a team that takes the work seriously without making a virtue of burning people out.
LI-JC2
LI-Remote
Benefits of Working at CrowdStrike:
CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.
CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements.
If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at [email protected] for further assistance.