Kroll Logo

Kroll

Senior Manager, Cyber Engineered Defense

Posted 3 Months Ago
Be an Early Applicant
Remote
Hiring Remotely in United States
150K-200K Annually
Senior level
Remote
Hiring Remotely in United States
150K-200K Annually
Senior level
Lead delivery and scaling of CrowdStrike MDR and Next‑Gen SIEM (LogScale) services. Define SOPs, playbooks, and automation; manage and mentor detection engineers; develop detection logic, baseline configurations, deployment templates, and automation (Terraform/Ansible/PowerShell/Python). Interface with client executives, track SLAs/metrics, and collaborate on alliance and go‑to‑market initiatives to mature clients' detection and response capabilities.
The summary above was generated by AI

Kroll’s Cyber Data & Resilience practice is building a high-growth CrowdStrike Next Gen SIEM and MDR Enablement practice, and we are seeking a proven technical leader to help shape and scale delivery across detection, automation, and managed response services. 

 

As a Senior Manager / Principal Consultant, you will oversee a team of detection engineers and client delivery professionals deploying and operationalizing CrowdStrike Falcon and LogScale. Your mission: to design repeatable delivery models, ensure operational excellence, and help clients accelerate their detection maturity through Kroll’s modern managed-services framework.
This is a leadership and delivery role—ideal for someone who enjoys bridging technical execution, service development, and client outcomes.

 

Day-to-Day Responsibilities:
  • Lead end-to-end delivery of CrowdStrike MDR and Next Gen SIEM (LogScale) implementations for enterprise and mid-market clients.

  • Define standard operating procedures, playbooks, and delivery frameworks for repeatable, scalable service delivery.

  • Manage and mentor detection engineers and consultants delivering client projects across CrowdStrike Falcon modules.

  • Oversee detection logic development, correlation rules, and SOC process optimization.

  • Partner with Kroll’s incident response and advisory teams to integrate post-incident detection enhancements into ongoing MDR operations.

  • Develop and maintain CrowdStrike baseline configurations, deployment templates, and automation accelerators (Terraform, Ansible, PowerShell).

  • Interface directly with client executives and technical stakeholders to translate business risk into detection and response strategies.

  • Collaborate with technology alliances (CrowdStrike, Microsoft, etc.) on co-developed service offerings and go-to-market enablement.

  • Track delivery metrics, SLAs, and client satisfaction to continuously improve program maturity and profitability.

Essential Traits:
  • 7–10+ years of experience in cybersecurity delivery, operations, or consulting (preferably within MDR, SOC, or detection engineering programs).

  • Proven track record leading teams deploying CrowdStrike Falcon and CrowdStrike LogScale technologies.

  • Strong understanding of SIEM/SOAR operations, detection logic, and threat response workflows.

  • Experience designing or maturing MDR service models (process, metrics, automation, and reporting).

  • Proficiency in Terraform, PowerShell, or Python for automation and configuration management.

  • Deep familiarity with multi-tenant operations, Flight Control, and Azure Lighthouse environments.

  • Excellent communication and presentation skills—comfortable interfacing with client CISOs and technical teams alike.

Preferred Skills
  • Experience in security consulting or managed services leadership (Big 4, MSSP, or global cyber provider preferred).

  • CrowdStrike certifications (CCFA, CCFR, CCSA) or equivalent technical credentials.

  • Familiarity with Defender Suite integration and hybrid XDR architecture.

  • Knowledge of ROI modeling, efficiency metrics, and service-based automation frameworks.

  • Strong business acumen and the ability to link detection and response outcomes to client risk reduction and value realization.

 

Your recruiter will be happy to walk you through your U.S.-specific benefits, which include:

 

  • Healthcare Coverage: Comprehensive medical, dental, and vision plans.

  • Time Off and Leave Policies: Generous paid time off (PTO), paid company holidays, generous parental and family leave.

  • Protective Insurances: Life insurance, short- and long-term disability coverage, and accident protection.

  • Compensation and Rewards: Competitive salary structures, performance-based incentives, and merit-based compensation reviews.

  • Retirement Plans: 401(k) plans with company matching.

 

Please note that benefits may vary by region, department and role. We encourage you to speak with your recruiter to learn more about the specific benefits available for your position.

 

About Kroll 

 

Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore and maximize our clients’ value? Your journey begins with Kroll. 

 

In order to be considered for a position, you must formally apply via careers.kroll.com.

 

We are proud to be an equal opportunity employer and will consider all qualified applicants regardless of gender, gender identity, race, religion, color, nationality, ethnic origin, sexual orientation, marital status, veteran status, age or disability.

 

The current salary range for this position is $150,000 to $200,000

 

 

#LI-CN1

#LI-Remote

 

 

Kroll Palo Alto, California, USA Office

Palo Alto, United States

Kroll San Francisco, California, USA Office

San Francisco, United States

Similar Jobs

3 Months Ago
Remote
United States
150K-200K Annually
Senior level
150K-200K Annually
Senior level
Big Data • Security • Software • Analytics • Cybersecurity
Lead and grow Kroll's CrowdStrike Falcon Cloud Security deployment practice: deploy, configure, integrate, tune CNAPP across AWS/Azure/GCP, build detections and SOAR playbooks, validate coverage, mentor consultants, and hand off runbooks to operations.
Top Skills: AksAquaArm/BicepAspmAWSAws Cloudformation StacksetsAws CloudtrailAws LambdaAws Secrets ManagerAzureAzure Activity LogAzure DevopsAzure FunctionsAzure Key VaultBashBicepCharlotte AiCiemCloudFormationCnappCqlCrowdstrike Falcon Cloud SecurityCspmCwpDefender For CloudDocker/Container RuntimesDspmEntra IdEntra Id Sign-In LogsExprt.AiFalcon AidrFalcon Fusion SoarFalcon Identity ProtectionFalcon Insight (Edr)Falcon Next-Gen Siem (Logscale)Gcp Audit LogsGcp Cloud FunctionsGcp Secret ManagerGithub ActionsGitlab CiGkeGoogle Cloud PlatformGuarddutyHashicorp VaultHelmIac ScanningIstioJenkinsKqlKspmKubernetes (EksKubernetes Admission ControllerKubernetes Audit LogsKyvernoLaceworkLinkerdNsg Flow LogsOpa (Rego)OrcaPowershellPrisma CloudPythonS3 Access LogsSecurity Command CenterSelf-Managed)SysdigTerraformVpc Flow LogsWiz
3 Months Ago
Remote
United States
150K-200K Annually
Senior level
150K-200K Annually
Senior level
Big Data • Security • Software • Analytics • Cybersecurity
Lead the CrowdStrike Identity Security consulting practice at Kroll by assessing, architecting, implementing identity solutions, mentoring consultants, and advising clients on identity strategy.
Top Skills: Active DirectoryCqlCrowdstrike FalconEntra IdFido2KqlOauth 2.0OidcOktaPowershellPythonSaaSSAMLScim
29 Minutes Ago
Remote or Hybrid
Pennsylvania, USA
104K-254K Annually
Senior level
104K-254K Annually
Senior level
Digital Media • Information Technology • News + Entertainment
Leads sales for Comcast Business's U.S. Federal Government channel, developing strategic account plans, acquiring and retaining federal customers, delivering sales presentations, managing pipelines, and exceeding quotas. Builds partnerships, supports complex proposals and solution design, coordinates with finance and engineering, and ensures customer satisfaction. Requires extensive knowledge of federal government sales, network design, managed network services, and federal acquisition processes. The role also includes coaching team members and maintaining Top Secret or TS/SCI clearance.
Top Skills: CybersecurityMan TechnologiesManaged Network ServicesNetwork DesignWireless Networking

What you need to know about the San Francisco Tech Scene

San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.

Key Facts About San Francisco Tech

  • Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Google, Apple, Salesforce, Meta
  • Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
  • Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
  • Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
  • Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account