Jobs at Kroll

Leads a cyber threat intelligence team delivering deep and dark web investigations, cyber due diligence, protective intelligence, and client assessments. Responsibilities include analyst coaching, investigative quality control, client engagement, scoping, proposal development, resource estimation, business development, and management of the summer internship program. The role combines hands-on investigative expertise with people, client, commercial, and capability leadership.

Lead financial instrument valuation and advisory engagements involving structured securities, whole loans, alternative assets, and private equity. Develop and review valuation and financial models using DCF, market, Monte Carlo, and bespoke methodologies. Manage client relationships, engagement economics, staffing, reports, presentations, and technical inquiries. Mentor junior professionals, conduct research, and defend modeling approaches with clients, auditors, and investors.

Provides technical support for cyber defense and incident response engagements, including digital forensics, breach investigation, remediation, case management, client communication, resource and budget coordination, quality oversight, and mentoring junior staff. The role involves managing concurrent complex projects, presenting findings, developing client relationships, and delivering commercially viable advice across diverse industries and global locations. Frequent travel may be required.

Manage cyber incident response engagements for global clients, providing technical support in digital forensics, cyber defense, and breach remediation. Responsibilities include coordinating complex cases, managing resources and budgets, presenting findings, maintaining client relationships, mentoring junior staff, monitoring quality, and delivering commercially viable advice across concurrent projects.

Leads enterprise CrowdStrike deployments, architecture, compromise assessments, threat hunting, SOC modernization, detection engineering, cyber analytics, Purple Team exercises, and incident response. Advises CISOs and executives, manages cross-functional teams, designs global 24/7 SOCs, and coordinates breach containment and recovery. Requires deep CrowdStrike expertise, cybersecurity leadership, scripting, network and detection engineering, and executive communication skills.

Leads AI governance and assurance engagements, designing policies, controls, operating models, risk assessments, and compliance programs. Evaluates AI security, model governance, third-party solutions, and control effectiveness against frameworks including NIST AI RMF, ISO 42001, and the EU AI Act. Collaborates with security and engineering teams to test threats such as prompt injection, model manipulation, data poisoning, and leakage. Advises executives and clients, develops methodologies and proposals, researches emerging AI risks and regulations, and supports business development.

Build and lead Kroll’s CrowdStrike Falcon AIDR deployment practice. Personally deploy, configure, integrate, and tune AIDR across client environments; connect it with Falcon SIEM, SOAR, Cloud Security, Data Protection, and Identity Protection; develop detection and data-protection policies; validate AI security controls; create runbooks and automation workflows; advise clients on deployment architecture; support pre-sales; and mentor consultants.

Direct incident response engagements, providing technical cyber defense and digital forensics expertise, managing complex cases, resources, budgets, and project delivery. The role includes presenting findings and advice to clients, maintaining client relationships, mentoring staff, monitoring quality, coordinating concurrent assignments, and meeting performance objectives. Candidates need substantial breach investigation and remediation experience, strong project management and communication skills, and relevant incident response or forensics certifications are beneficial.

Analyzes open, deep, and dark web intelligence to investigate cyber threats, data leaks, fraud, brand abuse, and threat actors. Supports incident response through threat research, indicator enrichment, vulnerability assessment, and exposure monitoring. Produces actionable reports and briefings for technical and non-technical clients, communicates findings, tracks workstreams, and collaborates with global CTI and incident response teams in a consulting environment.

Supports financial investigations, litigation support, forensic accounting, compliance assessments, fraud risk evaluations, asset tracing, and internal investigations. Conducts interviews, analyzes financial records, tests internal controls, prepares client reports and presentations, performs quality control, and manages project priorities. The role also provides oversight to junior staff, supports client relationships and business development, and collaborates with investigative teams across Kroll’s offices.

Supports cyber defense and incident response assignments, including forensic investigations, breach remediation, case management, client communication, resource and budget coordination, quality assurance, and delivery of commercially viable advice. Mentors junior staff, manages concurrent projects, develops client relationships, meets performance objectives, and may travel frequently across regions and industries.

Lead delivery and scaling of CrowdStrike MDR and Next‑Gen SIEM (LogScale) services. Define SOPs, playbooks, and automation; manage and mentor detection engineers; develop detection logic, baseline configurations, deployment templates, and automation (Terraform/Ansible/PowerShell/Python). Interface with client executives, track SLAs/metrics, and collaborate on alliance and go‑to‑market initiatives to mature clients' detection and response capabilities.

Lead and grow Kroll's CrowdStrike Falcon Cloud Security deployment practice: deploy, configure, integrate, tune CNAPP across AWS/Azure/GCP, build detections and SOAR playbooks, validate coverage, mentor consultants, and hand off runbooks to operations.

Lead the CrowdStrike Identity Security consulting practice at Kroll by assessing, architecting, implementing identity solutions, mentoring consultants, and advising clients on identity strategy.

Lead and manage complex financial investigations, forensic accounting, and regulatory compliance engagements. Oversee case teams, conduct investigative interviews and internal control testing, write client-facing reports, manage client relationships, and drive business development while ensuring high standards of case delivery and team development.