K

Kroll

Global risk management and investigations consulting

Senior Manager / Principal Consultant - Cyber Engineered Defense

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timeRemote in USARemote

About the Job

Requirements

  • Seven to ten or more years of experience in cybersecurity delivery, operations, or consulting, preferably within managed detection and response, security operations center, or detection engineering programs.
  • A proven track record leading teams deploying CrowdStrike Falcon and CrowdStrike LogScale technologies.
  • Strong understanding of security information and event management and security orchestration, automation, and response operations, detection logic, and threat response workflows.
  • Experience designing or maturing managed detection and response service models, including processes, metrics, automation, and reporting.
  • Proficiency in Terraform, PowerShell, or Python for automation and configuration management.
  • Deep familiarity with multi-tenant operations, Flight Control, and Azure Lighthouse environments.
  • Ability to interface with client chief information security officers and technical teams.

Responsibilities

  • Lead end-to-end delivery of CrowdStrike managed detection and response and next-generation security information and event management implementations for enterprise and mid-market clients.
  • Define standard operating procedures, playbooks, and delivery frameworks for repeatable, scalable service delivery.
  • Manage and mentor detection engineers and consultants delivering client projects across CrowdStrike Falcon modules.
  • Oversee detection logic development, correlation rules, and security operations center process optimization.
  • Partner with incident response and advisory teams to integrate post-incident detection enhancements into ongoing managed detection and response operations.
  • Develop and maintain CrowdStrike baseline configurations, deployment templates, and automation accelerators using Terraform, Ansible, and PowerShell.
  • Interface directly with client executives and technical stakeholders to translate business risk into detection and response strategies.
  • Collaborate with technology alliances, including CrowdStrike and Microsoft, on co-developed service offerings and go-to-market enablement.
  • Track delivery metrics, service-level agreements, and client satisfaction to continuously improve program maturity and profitability.

Desired Qualifications

  • Experience in security consulting or managed services leadership, preferably at a Big Four firm, managed security service provider, or global cybersecurity provider.
  • CrowdStrike certifications (CCFA, CCFR, CCSA) or equivalent technical credentials.
  • Familiarity with Defender Suite integration and hybrid extended detection and response architecture.
  • Knowledge of return-on-investment modeling, efficiency metrics, and service-based automation frameworks.
  • Business acumen and ability to link detection and response outcomes to client risk reduction and value realization.

About the Company

Kroll

Global risk management and investigations consulting

Preparing summary

Company size
5,001-10,000
Company stage
Not listed
Total funding
Not listed
Headquarters
New York City, New York
Founded
1932

Recently Posted Jobs

Explore more opportunities at Kroll

See more jobs