A Threat Hunter proactively identifies advanced cyber threats within organizational networks that evade traditional detection tools. This role involves hypothesis-driven investigations to uncover hidden adversaries, mitigate risks, and enhance SOC capabilities.
Key Responsibilities:
Develop and test hypotheses based on threat intelligence, anomalies, and attack patterns to proactively hunt for malicious activity.
Analyze logs, network traffic, endpoints, and telemetry data using tools like SIEM, EDR, and custom scripts to correlate events and detect stealthy attacks.
Document findings, create repeatable hunt playbooks, and collaborate with detection engineering to automate responses and improve defenses.
Research emerging threats, malware, and TTPs (tactics, techniques, procedures); generate reports and recommend mitigations.
Conduct threat hunting campaigns, assess vulnerabilities, and support incident response while optimizing hunting tools and processes.
Required Qualifications:
Bachelor's degree in Cybersecurity, Computer Science, or related field; advanced certifications like GCTI, CTIA, or OSCP preferred.
5+ years in cybersecurity, with hands-on experience in SOC, incident response, and threat hunting.
Proficiency in tools such as CrowdStrike Falcon, Splunk, Wireshark, YARA, and Python for scripting and automation.
Strong analytical skills, knowledge of MITRE ATT&CK framework, and understanding of cloud/network security.
In order to be considered for a position at Kroll, you must formally apply via careers.kroll.com
Kroll is committed to equal opportunity and diversity, and recruits people based on merit.
#LI-AT1
Skills Required
- Bachelor's degree in Cybersecurity, Computer Science, or a related field
- 5+ years of cybersecurity experience
- Hands-on experience in SOC operations, incident response, and threat hunting
- Proficiency with CrowdStrike Falcon, Splunk, Wireshark, YARA, and Python scripting
- Strong analytical skills
- Knowledge of the MITRE ATT&CK framework
- Understanding of cloud and network security
- Advanced certifications such as GCTI, CTIA, or OSCP
Kroll Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Kroll and has not been reviewed or approved by Kroll.
-
Healthcare Strength — Medical, dental, and vision coverage with HSA/FSA options are part of the U.S. package, alongside life and AD&D. Breadth across core health benefits is positioned as competitive for a large advisory firm.
-
Retirement Support — A 401(k) plan with company match is a core element of the package. Retirement support is consistently highlighted as competitive within total rewards.
-
Leave & Time Off Breadth — Paid holidays, sick leave, and PTO are included, with generous time off and parental/family leave for U.S. roles. Some roles also offer hybrid/WFH flexibility that complements time-off usability.
Kroll Insights
What We Do
Kroll is the world’s premier provider of services and digital products related to valuation, governance, risk and transparency. We work with clients across diverse sectors in the areas of valuation, expert services, investigations, cyber security, corporate finance, restructuring, legal and business solutions, data analytics and regulatory compliance. Our firm has nearly 5,000 professionals in 30 countries and territories around the world. For more information, visit www.kroll.com.
