Principal Technical Strategist - NextGen (Remote)

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily.

Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation.

We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role:

Our Product CTO organization includes a team of Technical Strategy leaders that bring outstanding ideas, the ability to execute, and teamwork to a strategic, high future impact organization. The primary responsibility of this role is to define and drive the company's technical vision, product strategy, and platform narrative for our Next-Gen SIEM and Log Management products.

This role requires deep technical knowledge in AI, SIEM/SOAR, log management, and data analysis and a functional understanding of actual real-world deployments, extended use-cases, and customer motivations. The ideal candidate doesn't just advise on strategy: they define what we build, why, and in what order, and they articulate how NGSIEM anchors CrowdStrike's platform consolidation story. This role reports to the Product CTO.

What You'll Do:

• Product Strategy & Creation
• Define and own the NGSIEM product strategy , including capability roadmap, competitive positioning, and technical differentiation. Translate market signals, customer pain, and threat landscape shifts into concrete product bets with clear success criteria.
• Drive product definition for new NGSIEM capabilities across data ingestion, detection logic, investigation workflows, and response automation. Partner with PM and Engineering to write strategy briefs that become epics, not shelf-ware.
• Own the data strategy for NGSIEM: which sources to prioritize for native connectors, how to handle petabyte-scale ingestion economics, and where federated search vs. centralized storage creates the right customer trade-off.
• Define the AI integration roadmap for NGSIEM: where Charlotte AI accelerates analyst workflows (triage, case analysis, CQL generation, threat hunting), and where AI-native detection and automated response create step-function improvements over rule-based approaches.
• Work with Product Management and Engineering to make key decisions on short/medium term roadmap as well as long term multi-year strategy.
• Help develop frameworks for aggregating multiple sources of information to streamline and expedite data-driven decision making.
• Platform Narrative & Cross-Pillar Integration
• Anchor NGSIEM within the Falcon platform consolidation narrative. Define how NGSIEM collapses the traditional SIEM + SOAR + log management + threat intel stack into a single platform experience, and articulate that story for analysts, CISOs, and the market.
• Drive cross-pillar integration strategy. Define how NGSIEM consumes and enriches data from Endpoint, Cloud Security, Identity Protection, and Exposure Management to deliver correlated detections that no standalone SIEM can match. Own the "better together" story with technical specificity.
• Shape the platform data flywheel narrative. Articulate how every Falcon module feeding data into NGSIEM makes detections better, and how NGSIEM insights flow back to improve prevention, posture, and response across the platform.
• Partner with NGSIEM, Fusion SOAR, Charlotte AI, and Falcon Foundry teams to define the automation and extensibility layer that sits on top of NGSIEM, ensuring the product strategy accounts for the full detect-investigate-respond lifecycle within the platform.
• Contribute to CrowdStrike's platform thought leadership. Represent the NGSIEM perspective in analyst briefings, customer advisory boards, and competitive positioning. Help tell the story of why a platform-native SIEM beats a bolt-on SIEM.
• Market Intelligence & Stakeholder Engagement
• With your extensive cybersecurity background and your ability to think and operate at a strategic level, you will drive CrowdStrike's technical vision and strategy for Next-Gen SIEM.
• Engage in the development of CrowdStrike's long-range strategic vision, and facilitate the entry of new security technology concepts to market to position CrowdStrike as the thought leader for Cybersecurity.
• Engage with field sales, strategic accounts, customer success, and other stakeholders to research product ideas, pain points, obstacles, and market opportunities.
• Use stakeholder feedback to inform necessary improvements and adjustments to the product.
• Maintain an in-depth knowledge of the cybersecurity industry, competitors, and related developments, to ensure we continue to be innovative thought leaders.
• Provide support to the wider CTO organization including the Falcon Fund, Privacy & Cyber Policy, Data Science and Detection Architecture teams, as well as the broader CrowdStrike organization as needed.

What You'll Need:

Bachelor's degree or higher in a relevant field.

Minimum 5 years of experience in the cybersecurity or log management market with heavy emphasis on security visibility and insights.

Minimum of 5 years relevant work experience (ideal candidates will have experience in at least TWO of the following): sales engineer/pre-sales, competitive intelligence, solution architect, sales operations, product management, technical marketing, professional services, research & development, and technical support.

Experience defining and shipping product capabilities (not just advising on them); demonstrated ability to turn strategy into shipped features.

Understanding of platform economics: how data network effects, module attach rates, and consolidation pricing drive platform value.

Familiarity with detection engineering pipelines, correlation rule frameworks, or content-as-code approaches.

Hands-on experience with products (either designing, evaluating/testing, or in production).

Superior communication skills including experience presenting to senior & executive level management.

Excellent people and project management skills to manage projects and interact/build rapport with staff, colleagues, cross-functional teams and third parties.

Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.

Bonus Points:

Direct experience with customers (as a customer, or in a customer support or field role).

Real world experience with AI, SIEM, SOAR or Log Management tools to do threat hunting, vulnerability detection, risk analysis or compliance validation.

Experience articulating platform consolidation narratives to analysts (Gartner, Forrester, IDC) or in competitive displacement scenarios.

Hands-on experience with CrowdStrike Query Language (CQL), LogScale, or comparable query-time analytics at scale.

Background in building or evaluating AI/ML-driven security automation (auto-triage, anomaly detection, LLM-assisted investigation).