Jobs at Kroll

Leads multiple complex, client-facing breach notification engagements from scoping through closeout. Manages scope, schedules, risks, deliverables, vendors, internal teams, and client expectations while serving as the primary client contact. Provides breach notification expertise, advises stakeholders on data breach response requirements, resolves blockers, communicates progress, and coaches Client Operations Managers. The role is fully remote within the United States and requires strong project management, communication, financial judgment, and client leadership skills.

Leads a cyber threat intelligence team delivering deep and dark web investigations, cyber due diligence, protective intelligence, and client assessments. Responsibilities include analyst coaching, investigative quality control, client engagement, scoping, proposal development, resource estimation, business development, and management of the summer internship program. The role combines hands-on investigative expertise with people, client, commercial, and capability leadership.

Lead financial instrument valuation and advisory engagements involving structured securities, whole loans, alternative assets, and private equity. Develop and review valuation and financial models using DCF, market, Monte Carlo, and bespoke methodologies. Manage client relationships, engagement economics, staffing, reports, presentations, and technical inquiries. Mentor junior professionals, conduct research, and defend modeling approaches with clients, auditors, and investors.

Provides technical support for cyber defense and incident response engagements, including digital forensics, breach investigation, remediation, case management, client communication, resource and budget coordination, quality oversight, and mentoring junior staff. The role involves managing concurrent complex projects, presenting findings, developing client relationships, and delivering commercially viable advice across diverse industries and global locations. Frequent travel may be required.

Manage cyber incident response engagements for global clients, providing technical support in digital forensics, cyber defense, and breach remediation. Responsibilities include coordinating complex cases, managing resources and budgets, presenting findings, maintaining client relationships, mentoring junior staff, monitoring quality, and delivering commercially viable advice across concurrent projects.

Leads enterprise CrowdStrike deployments, architecture, compromise assessments, threat hunting, SOC modernization, detection engineering, cyber analytics, Purple Team exercises, and incident response. Advises CISOs and executives, manages cross-functional teams, designs global 24/7 SOCs, and coordinates breach containment and recovery. Requires deep CrowdStrike expertise, cybersecurity leadership, scripting, network and detection engineering, and executive communication skills.

Leads AI governance and assurance engagements, designing policies, controls, operating models, risk assessments, and compliance programs. Evaluates AI security, model governance, third-party solutions, and control effectiveness against frameworks including NIST AI RMF, ISO 42001, and the EU AI Act. Collaborates with security and engineering teams to test threats such as prompt injection, model manipulation, data poisoning, and leakage. Advises executives and clients, develops methodologies and proposals, researches emerging AI risks and regulations, and supports business development.

Analyzes open, deep, and dark web intelligence to investigate cyber threats, data leaks, fraud, brand abuse, and threat actors. Supports incident response through threat research, indicator enrichment, vulnerability assessment, and exposure monitoring. Produces actionable reports and briefings for technical and non-technical clients, communicates findings, tracks workstreams, and collaborates with global CTI and incident response teams in a consulting environment.

Supports financial investigations, litigation support, forensic accounting, compliance assessments, fraud risk evaluations, asset tracing, and internal investigations. Conducts interviews, analyzes financial records, tests internal controls, prepares client reports and presentations, performs quality control, and manages project priorities. The role also provides oversight to junior staff, supports client relationships and business development, and collaborates with investigative teams across Kroll’s offices.

Supports cyber defense and incident response assignments, including forensic investigations, breach remediation, case management, client communication, resource and budget coordination, quality assurance, and delivery of commercially viable advice. Mentors junior staff, manages concurrent projects, develops client relationships, meets performance objectives, and may travel frequently across regions and industries.

Lead delivery and scaling of CrowdStrike MDR and Next‑Gen SIEM (LogScale) services. Define SOPs, playbooks, and automation; manage and mentor detection engineers; develop detection logic, baseline configurations, deployment templates, and automation (Terraform/Ansible/PowerShell/Python). Interface with client executives, track SLAs/metrics, and collaborate on alliance and go‑to‑market initiatives to mature clients' detection and response capabilities.

Lead and grow Kroll's CrowdStrike Falcon Cloud Security deployment practice: deploy, configure, integrate, tune CNAPP across AWS/Azure/GCP, build detections and SOAR playbooks, validate coverage, mentor consultants, and hand off runbooks to operations.

Lead the CrowdStrike Identity Security consulting practice at Kroll by assessing, architecting, implementing identity solutions, mentoring consultants, and advising clients on identity strategy.

Lead and manage complex financial investigations, forensic accounting, and regulatory compliance engagements. Oversee case teams, conduct investigative interviews and internal control testing, write client-facing reports, manage client relationships, and drive business development while ensuring high standards of case delivery and team development.