Principal Technical Strategist - NextGen (Remote)
Role Overview
Our Product CTO organization includes a team of Technical Strategy leaders that bring outstanding ideas, the ability to execute, and teamwork to a strategic, high future impact organization. The primary responsibility of this role is to define and drive the company's technical vision, product strategy, and platform narrative for our Next-Gen SIEM and Log Management products.
This role requires deep technical knowledge in AI, SIEM/SOAR, log management, and data analysis and a functional understanding of actual real-world deployments, extended use-cases, and customer motivations. The ideal candidate doesn't just advise on strategy: they define what we build, why, and in what order, and they articulate how NGSIEM anchors CrowdStrike's platform consolidation story. This role reports to the Product CTO.
What You'll Do: Product Strategy & Creation
Define and own the NGSIEM product strategy, including capability roadmap, competitive positioning, and technical differentiation. Translate market signals, customer pain, and threat landscape shifts into concrete product bets with clear success criteria.
Drive product definition for new NGSIEM capabilities across data ingestion, detection logic, investigation workflows, and response automation. Partner with PM and Engineering to write strategy briefs that become epics, not shelf-ware.
Own the data strategy for NGSIEM: which sources to prioritize for native connectors, how to handle petabyte-scale ingestion economics, and where federated search vs. centralized storage creates the right customer trade-off.
Define the AI integration roadmap for NGSIEM: where Charlotte AI accelerates analyst workflows (triage, case analysis, CQL generation, threat hunting), and where AI-native detection and automated response create step-function improvements over rule-based approaches.
Work with Product Management and Engineering to make key decisions on short/medium term roadmap as well as long term multi-year strategy.
Help develop frameworks for aggregating multiple sources of information to streamline and expedite data-driven decision making.
Platform Narrative & Cross-Pillar Integration
Anchor NGSIEM within the Falcon platform consolidation narrative. Define how NGSIEM collapses the traditional SIEM + SOAR + log management + threat intel stack into a single platform experience, and articulate that story for analysts, CISOs, and the market.
Drive cross-pillar integration strategy. Define how NGSIEM consumes and enriches data from Endpoint, Cloud Security, Identity Protection, and Exposure Management to deliver correlated detections that no standalone SIEM can match. Own the "better together" story with technical specificity.
Shape the platform data flywheel narrative. Articulate how every Falcon module feeding data into NGSIEM makes detections better, and how NGSIEM insights flow back to improve prevention, posture, and response across the platform.
Partner with NGSIEM, Fusion SOAR, Charlotte AI, and Falcon Foundry teams to define the automation and extensibility layer that sits on top of NGSIEM, ensuring the product strategy accounts for the full detect-investigate-respond lifecycle within the platform.
Contribute to CrowdStrike's platform thought leadership. Represent the NGSIEM perspective in analyst briefings, customer advisory boards, and competitive positioning. Help tell the story of why a platform-native SIEM beats a bolt-on SIEM.
Market Intelligence & Stakeholder Engagement
With your extensive cybersecurity background and your ability to think and operate at a strategic level, you will drive CrowdStrike's technical vision and strategy for Next-Gen SIEM.
Engage in the development of CrowdStrike's long-range strategic vision, and facilitate the entry of new security technology concepts to market to position CrowdStrike as the thought leader for Cybersecurity.
Engage with field sales, strategic accounts, customer success, and other stakeholders to research product ideas, pain points, obstacles, and market opportunities.
Use stakeholder feedback to inform necessary improvements and adjustments to the product.
Maintain an in-depth knowledge of the cybersecurity industry, competitors, and related developments, to ensure we continue to be innovative thought leaders.
Provide support to the wider CTO organization including the Falcon Fund, Privacy & Cyber Policy, Data Science and Detection Architecture teams, as well as the broader CrowdStrike organization as needed.
What You'll Need:
Bachelor's degree or higher in a relevant field.
Minimum 5 years of experience in the cybersecurity or log management market with heavy emphasis on security visibility and insights.
Minimum of 5 years relevant work experience (ideal candidates will have experience in at least TWO of the following): sales engineer/pre-sales, competitive intelligence, solution architect, sales operations, product management, technical marketing, professional services, research & development, and technical support.
Experience defining and shipping product capabilities (not just advising on them); demonstrated ability to turn strategy into shipped features.
Understanding of platform economics: how data network effects, module attach rates, and consolidation pricing drive platform value.
Familiarity with detection engineering pipelines, correlation rule frameworks, or content-as-code approaches.
Hands-on experience with products (either designing, evaluating/testing, or in production).
Superior communication skills including experience presenting to senior & executive level management.
Excellent people and project management skills to manage projects and interact/build rapport with staff, colleagues, cross-functional teams and third parties.
Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.
Bonus Points:
Direct experience with customers (as a customer, or in a customer support or field role).
Real world experience with AI, SIEM, SOAR or Log Management tools to do threat hunting, vulnerability detection, risk analysis or compliance validation.
Experience articulating platform consolidation narratives to analysts (Gartner, Forrester, IDC) or in competitive displacement scenarios.
Hands-on experience with CrowdStrike Query Language (CQL), LogScale, or comparable query-time analytics at scale.
Background in building or evaluating AI/ML-driven security automation (auto-triage, anomaly detection, LLM-assisted investigation).
#LI-IL1
#LI-DG1
#LI-Remote
Benefits of Working at CrowdStrike:
Market leader in compensation and equity awards
Comprehensive physical and mental wellness programs
Competitive vacation and holidays for recharge
Paid parental and adoption leaves
Professional development opportunities for all employees regardless of level or role
Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
Vibrant office culture with world class amenities
Great Place to Work CertifiedTM across the globe
CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.
CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements.
If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at [email protected] for further assistance.
Find out more about your rights as an applicant.
CrowdStrike participates in the E-Verify program.
Notice of E-Verify Participation
Right to Work
CrowdStrike, Inc. is committed to fair and equitable compensation practices. Placement within the pay range is dependent on a variety of factors including, but not limited to, relevant work experience, skills, certifications, job level, supervisory status, and location. The base salary range for this position for all U.S. candidates is $180,000 - $275,000 per year, with eligibility for bonuses, equity grants and a comprehensive benefits package that includes health insurance, 401k and paid time off.
For detailed information about the U.S. benefits package, please click here.
Expected Close Date of Job Posting is:12-20-2026
Full Job Posting
About the Role:
Our Product CTO organization includes a team of Technical Strategy leaders that bring outstanding ideas, the ability to execute, and teamwork to a strategic, high future impact organization. The primary responsibility of this role is to define and drive the company's technical vision, product strategy, and platform narrative for our Next-Gen SIEM and Log Management products.
This role requires deep technical knowledge in AI, SIEM/SOAR, log management, and data analysis and a functional understanding of actual real-world deployments, extended use-cases, and customer motivations. The ideal candidate doesn't just advise on strategy: they define what we build, why, and in what order, and they articulate how NGSIEM anchors CrowdStrike's platform consolidation story. This role reports to the Product CTO.
What You'll Do: Product Strategy & Creation
Define and own the NGSIEM product strategy, including capability roadmap, competitive positioning, and technical differentiation. Translate market signals, customer pain, and threat landscape shifts into concrete product bets with clear success criteria.
Drive product definition for new NGSIEM capabilities across data ingestion, detection logic, investigation workflows, and response automation. Partner with PM and Engineering to write strategy briefs that become epics, not shelf-ware.
Own the data strategy for NGSIEM: which sources to prioritize for native connectors, how to handle petabyte-scale ingestion economics, and where federated search vs. centralized storage creates the right customer trade-off.
Define the AI integration roadmap for NGSIEM: where Charlotte AI accelerates analyst workflows (triage, case analysis, CQL generation, threat hunting), and where AI-native detection and automated response create step-function improvements over rule-based approaches.
Work with Product Management and Engineering to make key decisions on short/medium term roadmap as well as long term multi-year strategy.
Help develop frameworks for aggregating multiple sources of information to streamline and expedite data-driven decision making.
Platform Narrative & Cross-Pillar Integration
Anchor NGSIEM within the Falcon platform consolidation narrative. Define how NGSIEM collapses the traditional SIEM + SOAR + log management + threat intel stack into a single platform experience, and articulate that story for analysts, CISOs, and the market.
Drive cross-pillar integration strategy. Define how NGSIEM consumes and enriches data from Endpoint, Cloud Security, Identity Protection, and Exposure Management to deliver correlated detections that no standalone SIEM can match. Own the "better together" story with technical specificity.
Shape the platform data flywheel narrative. Articulate how every Falcon module feeding data into NGSIEM makes detections better, and how NGSIEM insights flow back to improve prevention, posture, and response across the platform.
Partner with NGSIEM, Fusion SOAR, Charlotte AI, and Falcon Foundry teams to define the automation and extensibility layer that sits on top of NGSIEM, ensuring the product strategy accounts for the full detect-investigate-respond lifecycle within the platform.
Contribute to CrowdStrike's platform thought leadership. Represent the NGSIEM perspective in analyst briefings, customer advisory boards, and competitive positioning. Help tell the story of why a platform-native SIEM beats a bolt-on SIEM.
Market Intelligence & Stakeholder Engagement
With your extensive cybersecurity background and your ability to think and operate at a strategic level, you will drive CrowdStrike's technical vision and strategy for Next-Gen SIEM.
Engage in the development of CrowdStrike's long-range strategic vision, and facilitate the entry of new security technology concepts to market to position CrowdStrike as the thought leader for Cybersecurity.
Engage with field sales, strategic accounts, customer success, and other stakeholders to research product ideas, pain points, obstacles, and market opportunities.
Use stakeholder feedback to inform necessary improvements and adjustments to the product.
Maintain an in-depth knowledge of the cybersecurity industry, competitors, and related developments, to ensure we continue to be innovative thought leaders.
Provide support to the wider CTO organization including the Falcon Fund, Privacy & Cyber Policy, Data Science and Detection Architecture teams, as well as the broader CrowdStrike organization as needed.
What You'll Need:
Bachelor's degree or higher in a relevant field.
Minimum 5 years of experience in the cybersecurity or log management market with heavy emphasis on security visibility and insights.
Minimum of 5 years relevant work experience (ideal candidates will have experience in at least TWO of the following): sales engineer/pre-sales, competitive intelligence, solution architect, sales operations, product management, technical marketing, professional services, research & development, and technical support.
Experience defining and shipping product capabilities (not just advising on them); demonstrated ability to turn strategy into shipped features.
Understanding of platform economics: how data network effects, module attach rates, and consolidation pricing drive platform value.
Familiarity with detection engineering pipelines, correlation rule frameworks, or content-as-code approaches.
Hands-on experience with products (either designing, evaluating/testing, or in production).
Superior communication skills including experience presenting to senior & executive level management.
Excellent people and project management skills to manage projects and interact/build rapport with staff, colleagues, cross-functional teams and third parties.
Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.
Bonus Points:
Direct experience with customers (as a customer, or in a customer support or field role).
Real world experience with AI, SIEM, SOAR or Log Management tools to do threat hunting, vulnerability detection, risk analysis or compliance validation.
Experience articulating platform consolidation narratives to analysts (Gartner, Forrester, IDC) or in competitive displacement scenarios.
Hands-on experience with CrowdStrike Query Language (CQL), LogScale, or comparable query-time analytics at scale.
Background in building or evaluating AI/ML-driven security automation (auto-triage, anomaly detection, LLM-assisted investigation).
#LI-IL1
#LI-DG1
#LI-Remote
Benefits of Working at CrowdStrike:
Market leader in compensation and equity awards
Comprehensive physical and mental wellness programs
Competitive vacation and holidays for recharge
Paid parental and adoption leaves
Professional development opportunities for all employees regardless of level or role
Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
Vibrant office culture with world class amenities
Great Place to Work CertifiedTM across the globe
CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.
CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements.
If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at [email protected] for further assistance.
Find out more about your rights as an applicant.
CrowdStrike participates in the E-Verify program.
Notice of E-Verify Participation
Right to Work
CrowdStrike, Inc. is committed to fair and equitable compensation practices. Placement within the pay range is dependent on a variety of factors including, but not limited to, relevant work experience, skills, certifications, job level, supervisory status, and location. The base salary range for this position for all U.S. candidates is $180,000 - $275,000 per year, with eligibility for bonuses, equity grants and a comprehensive benefits package that includes health insurance, 401k and paid time off.
For detailed information about the U.S. benefits package, please click here.
Expected Close Date of Job Posting is:12-20-2026
Qualifications
- Bachelor's degree or higher in a relevant field.
- Familiarity with detection engineering pipelines, correlation rule frameworks, or content-as-code approaches.
- Hands-on experience with products (either designing, evaluating/testing, or in production).
- Hands-on experience with CrowdStrike Query Language (CQL), LogScale, or comparable query-time analytics at scale.
Responsibilities
- Product Strategy & Creation
- Define and own the NGSIEM product strategy, including capability roadmap, competitive positioning, and technical differentiation. Translate market signals, customer pain, and threat landscape shifts into concrete product bets with clear success criteria.
- Drive product definition for new NGSIEM capabilities across data ingestion, detection logic, investigation workflows, and response automation. Partner with PM and Engineering to write strategy briefs that become epics, not shelf-ware.
- Own the data strategy for NGSIEM: which sources to prioritize for native connectors, how to handle petabyte-scale ingestion economics, and where federated search vs. centralized storage creates the right customer trade-off.
- Define the AI integration roadmap for NGSIEM: where Charlotte AI accelerates analyst workflows (triage, case analysis, CQL generation, threat hunting), and where AI-native detection and automated response create step-function improvements over rule-based approaches.
- Work with Product Management and Engineering to make key decisions on short/medium term roadmap as well as long term multi-year strategy.
- Help develop frameworks for aggregating multiple sources of information to streamline and expedite data-driven decision making.
- Anchor NGSIEM within the Falcon platform consolidation narrative. Define how NGSIEM collapses the traditional SIEM + SOAR + log management + threat intel stack into a single platform experience, and articulate that story for analysts, CISOs, and the market.
- Drive cross-pillar integration strategy. Define how NGSIEM consumes and enriches data from Endpoint, Cloud Security, Identity Protection, and Exposure Management to deliver correlated detections that no standalone SIEM can match. Own the "better together" story with technical specificity.
- Shape the platform data flywheel narrative. Articulate how every Falcon module feeding data into NGSIEM makes detections better, and how NGSIEM insights flow back to improve prevention, posture, and response across the platform.
- Partner with NGSIEM, Fusion SOAR, Charlotte AI, and Falcon Foundry teams to define the automation and extensibility layer that sits on top of NGSIEM, ensuring the product strategy accounts for the full detect-investigate-respond lifecycle within the platform.
- Contribute to CrowdStrike's platform thought leadership. Represent the NGSIEM perspective in analyst briefings, customer advisory boards, and competitive positioning. Help tell the story of why a platform-native SIEM beats a bolt-on SIEM.
- With your extensive cybersecurity background and your ability to think and operate at a strategic level, you will drive CrowdStrike's technical vision and strategy for Next-Gen SIEM.
- Engage in the development of CrowdStrike's long-range strategic vision, and facilitate the entry of new security technology concepts to market to position CrowdStrike as the thought leader for Cybersecurity.
- Engage with field sales, strategic accounts, customer success, and other stakeholders to research product ideas, pain points, obstacles, and market opportunities.
- Use stakeholder feedback to inform necessary improvements and adjustments to the product.
- Maintain an in-depth knowledge of the cybersecurity industry, competitors, and related developments, to ensure we continue to be innovative thought leaders.
- Provide support to the wider CTO organization including the Falcon Fund, Privacy & Cyber Policy, Data Science and Detection Architecture teams, as well as the broader CrowdStrike organization as needed.
- Bachelor's degree or higher in a relevant field.
- Minimum 5 years of experience in the cybersecurity or log management market with heavy emphasis on security visibility and insights.
- Minimum of 5 years relevant work experience (ideal candidates will have experience in at least TWO of the following): sales engineer/pre-sales, competitive intelligence, solution architect, sales operations, product management, technical marketing, professional services, research & development, and technical support.
- Experience defining and shipping product capabilities (not just advising on them); demonstrated ability to turn strategy into shipped features.
- Understanding of platform economics: how data network effects, module attach rates, and consolidation pricing drive platform value.
- Familiarity with detection engineering pipelines, correlation rule frameworks, or content-as-code approaches.
- Hands-on experience with products (either designing, evaluating/testing, or in production).
- Superior communication skills including experience presenting to senior & executive level management.
- Excellent people and project management skills to manage projects and interact/build rapport with staff, colleagues, cross-functional teams and third parties.
- Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.
- Direct experience with customers (as a customer, or in a customer support or field role).
- Real world experience with AI, SIEM, SOAR or Log Management tools to do threat hunting, vulnerability detection, risk analysis or compliance validation.
- Experience articulating platform consolidation narratives to analysts (Gartner, Forrester, IDC) or in competitive displacement scenarios.
- Hands-on experience with CrowdStrike Query Language (CQL), LogScale, or comparable query-time analytics at scale.
- Background in building or evaluating AI/ML-driven security automation (auto-triage, anomaly detection, LLM-assisted investigation).
- #LI-IL1
- #LI-DG1
- #LI-Remote
- Market leader in compensation and equity awards
- Comprehensive physical and mental wellness programs
- Competitive vacation and holidays for recharge
- Paid parental and adoption leaves
- Professional development opportunities for all employees regardless of level or role
- Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
- Vibrant office culture with world class amenities
- Great Place to Work CertifiedTM across the globe
- CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.
- CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements.
- If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at [email protected] for further assistance.
- Find out more about your rights as an applicant.
- CrowdStrike participates in the E-Verify program.
- Notice of E-Verify Participation
- Right to Work
- CrowdStrike, Inc. is committed to fair and equitable compensation practices. Placement within the pay range is dependent on a variety of factors including, but not limited to, relevant work experience, skills, certifications, job level, supervisory status, and location. The base salary range for this position for all U.S. candidates is $180,000 - $275,000 per year, with eligibility for bonuses, equity grants and a comprehensive benefits package that includes health insurance, 401k and paid time off.
- For detailed information about the U.S. benefits package, please click here.
- Expected Close Date of Job Posting is:12-20-2026
About CrowdStrike
CrowdStrike is an American cybersecurity company that provides cloud-delivered endpoint protection, threat intelligence, and cyberattack response services. It is best known for its Falcon platform, which uses artificial intelligence to stop breaches.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at CrowdStrike
Sr. Engineering Manager, Platform API - Sensor Foundations (Hybrid)
New York City, USA
Director, Incident Response ( Remote, GBR)
, GBR
Consultant, Cloud Incident Response (Remote)
, GBR
Regional Alliance Manager, GSI
Bengaluru, IND
Incident Response Consultant (Remote)
, USA
Manager, Platform Services Project Management (Remote)
, USA
Sr. Strategic Advisory Services Consultant (Remote)
, USA
Sr. Engineering Manager, Platform API - Sensor Foundations (Hybrid)
New York City, USA
Executive Assistant (Hybrid, Sunnyvale)
Sunnyvale, USA
