Professional Services Intern Incident Response Summer 2026 (London, GBR)

Location: Remote with 1 day a week in the London office

About the Role:

The CrowdStrike Services Internship Programme is a 12-week full-time summer internship that provides individuals with experience across all major aspects of the CrowdStrike Services business with a focus on Incident Response.

After completing this programme candidates will have experience in the following areas:

Infrastructure

• Networking Fundamentals

• Active Directory and Enterprise Network Fundamentals

CrowdStrike Tools

• Falcon Endpoint Protection Platform (EPP)

• Falcon Forensics Collector (FFC)

Forensics and Triage

• Windows and Linux Disk Forensics (X-Ways Forensics and Magnet AXIOM)

• Forensic Analysis via Supertimelining (Plaso/log2timeline)

• Log Analysis

• Cloud forensics:

  • Amazon Web Services (AWS)

  • Microsoft Azure

Proactive Services

• Red Team Operations

• Tabletop Exercises

• Cybersecurity Maturity Assessments

• Compromise Assessments

Project Management and Reporting

• Incident Response Reporting

• Client Communication and Management

• Handling complex incidents including those involving ransomware and sophisticated nation state adversaries

What Youll Need:

• You must be working towards a BA/BSc/BEng or MA/MSci/MEng undergraduate degree in Cybersecurity Computer Forensics Computer Science Computer Systems Engineering Electronic & Electrical Engineering Mathematics Information Security Information Systems Information Assurance Information Security Management Intelligence Studies Data Science or any other related field. Applicants will be considered from courses other than this example list where applicable experience and aptitude is demonstrated.

• You must be in the penultimate year of your undergraduate programme i.e. your:

  • Second year of a three-year Bachelors programme;

  • Third year of a four-year year in industry (sandwich) programme; or

  • Third year of a four-year integrated Masters undergraduate programme.

This will mean that you should be scheduled to graduate during the Summer of 2027 or December 2026.

• Successful applicants will join the UK Incident Response (IR) team in a remote position. The team operates a hybrid (predominantly remote) model combining four days per week of remote work with one day per week in our East London office near Shoreditch. Whilst you do not need to be based in the Greater London area successful applicants will be invited to travel to London approximately once every four weeks (at CrowdStrikes expense) to meet and collaborate with the team. This is of course subject to local health measures.

• You must be eligible to work in the UK.

• All employment offers including for interns are subject to a full background check.

Bonus Points:

Successful candidates will have experience in one or more of the following areas:

• Have an investigative mindset and a desire to find and stop evil

• Keep up with the latest vulnerabilities and breaches

• Be self-motivated and actively seek opportunities for growth

• Desire to rapidly accelerate their skills

• Crave new and innovative work

• Be able to complete technical tasks with minimal supervision

• Desire to develop both technical and soft skills

• Contribute to a positive work environment and have a can-do attitude

• Be seeking a career in cybersecurity and/or incident response

• Bring a willingness to build improve and innovate solutions to interesting technical problems

From a technical perspective it is desired (but not required) that candidates:

• Be comfortable with command-line interfaces (Windows Linux macOS or any combination of those)

• Be familiar with scripting languages (PowerShell Python 3 etc.)

• Be versed in forensic analysis methodology for Windows systems (Mac/Linux forensics knowledge is a plus)

• Be acquainted with strategies and tools to rapidly analyse large sets of logs (such as Splunk ELK etc.)

What You Can Expect:

• Executive Speaker Series & Tech Talks

• A rigorous world-leading incident response course built especially for our CrowdStrike Incident Response interns delivered by subject matter experts right across the division covering the full incident response lifecycle including:

  • Host forensic analysis

  • Cloud forensics

  • Large-scale log analysis techniques

  • Consulting and project management skills

  • Introductory red teaming to understand an attack from the adversarys perspective

  • Introductory strategic consulting (table top exercises maturity assessments etc.)

  • The CrowdStrike Falcon platform

  • Specific tech talks on deployment handling ransomware etc.

  • The opportunity to work on a mock engagement run entirely by interns end to end

  • Much more!

• Fun socials

• Networking opportunities with fellow interns and CrowdStrikers

• Owning impactful individual projects that move the company forward

• Working alongside a diverse and global team

• Two assigned mentors with continuous feedback and rapid support

• Access to our FalconFit Wellness Program and Employee Assistance Program

• Fun Slack channels (e.g. food gaming sports pets etc.)

• Paid bank holidays and pension contributions

• Work from home stipend to help with remote desk set up

#LI-HR1

What You Can Expect:

• Market leader in compensation and equity awards

• Paid holidays (including birthday holidays) and 401k matching (where applicable)

• Professional development opportunities including workshops tech talks and Executive Speaker Series

• Assigned mentors from across the company for continuous support and feedback

• Participation in companywide initiatives including FalconFIT Wellness Programs and Employee Assistance Program

• Employee Networks geographic neighborhood groups and volunteer opportunities to build connections

• Vibrant office culture with world class amenities

• Ownership of impactful projects that move the company forward

• Great Place to Work Certified across the globe

CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.

CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race color creed ethnicity religion sex (including pregnancy or pregnancy-related medical conditions) sexual orientation gender identity marital or family status veteran status age national origin ancestry physical disability (including HIV and AIDS) mental disability medical condition genetic information membership or activity in a local human rights commission status with regard to public assistance or any other characteristic protected by law. We base all employment decisions--including recruitment selection training compensation benefits discipline promotions transfers lay-offs return from lay-off terminations and social/recreational programs--on valid job requirements.

If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation please contact us at for further assistance.