Teams at CrowdStrike

Leads CrowdStrike’s enterprise crisis response program, including governance, playbooks, activation processes, exercises, training, readiness, incident command coverage, executive briefings, and after-action improvements. Partners across resilience, security, communications, and customer response functions to coordinate high-impact events. Builds and manages the Response Operations team, supports executives during crises, maintains on-call readiness, and drives corrective actions to closure.

Monitor, investigate, and respond to security detections across endpoint, identity, email, network, and cloud environments. Analyze EDR telemetry, logs, forensic artifacts, malware, Microsoft 365 incidents, and network activity to determine compromise scope and recommend remediation. Communicate findings and response guidance to customers, improve detection and containment processes, and use scripting and AI technologies to support security operations.

Build and maintain automated functional, integration, performance, and load testing frameworks for distributed cloud systems. Develop agentic test-generation workflows, AI evaluation suites, golden datasets, scoring pipelines, and CI quality gates. Test AI reliability, safety, latency, and cost while validating platform integrations and customer-facing features. Analyze scalability, identify bottlenecks, review designs for testability, and advance engineering quality standards.