Senior Associate - Incident Response
$100k - $150k+ Performance-based incentives + 401(k) match
Mid
Remote in USA
RemoteThe role may require frequent travel.
CybersecuritySecurity Operations & Incident Response
About the job
Requirements
- Solid knowledge of Digital Forensics and Incident Response.
- Expertise in incident response, computer forensics, malware reverse engineering, network security, and computer security audit.
- Project management skills to communicate effectively and build working relationships with clients and colleagues across Kroll’s network of offices.
- Approximately three years of incident response experience investigating and remediating cyber breaches; consultancy experience is preferred.
- Fluency in English and fluency or native capability in the language of the country where the candidate will be based.
- Experience managing complex cases, resources, and budgets.
- Ability to coordinate concurrent projects and tasks and manage competing demands.
- Interest in global events and markets, with awareness of working across different cultural and political environments.
- Written and verbal communication skills to represent diverse communities.
- Experience working with diverse teams.
Responsibilities
- Deliver technical skills in support of cyber defense or incident response assignments.
- Support the Case Manager in running assignments through closure, including providing input on project structure, resource management, presentation of findings, and commercially viable client advice.
- Monitor the quality of own work and that of the assignment team, ensuring value is delivered to the client.
- Communicate regularly with senior team members and raise case issues and findings to appropriate personnel for resolution and decision-making.
- Develop and maintain client relationships while adhering to Kroll’s service and integrity standards.
- Mentor junior staff and support their development.
- Achieve key performance indicators for utilization, business generation, and personal objectives.
- Identify learning needs and opportunities and continuously improve personal performance.
Desired Qualifications
- Consultancy experience investigating and remediating cyber breaches.
- CREST IR, CFCE, ENCE, GIAC, GCFA, GCIH, GREM, GNFA, or other relevant certifications.
About the company
Preparing summary
Company Size
5,001-10,000
Company Stage
N/A
Total Funding
N/A
Headquarters
New York City, New York
Founded
1932
Get referred to Kroll
See people who can refer or advise you
Simplify's Take
What believers are saying
- Kroll launched APEX on August 31, 2026, targeting CFOs spending on AI cyber automation.
- Kroll acquired ABC economics in July 2026, deepening European cartel and damages expertise.
- Kroll expanded South Africa restructuring on June 2, 2026, adding three senior leaders.
What critics are saying
- FTX and BlockFi data-breach claims against Kroll Restructuring Administration face arbitration through October 2026.
- A September 23, 2026 scheduling order keeps Kroll in a DTSA trade-secret suit.
- Kroll Restructuring Administration’s 2023 breach litigation threatens bankruptcy-client trust and future appointments.
What makes Kroll unique
- Kroll spans investigations, restructuring, valuation, and cyber, letting clients buy one advisor globally.
- Fred Crawford became Executive Chairman on May 18, 2026, strengthening professional-services scaling discipline.
- APEX embeds Kroll’s advisory methods inside CrowdStrike Falcon, tying strategy directly to execution.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Hybrid Work Options