We are looking for an enthusiastic cyber security engineer that wishes to make the move into security platform operations for a large MSSP.
The applicant should be highly proficient with virtual & physical infrastructure operations, have a good understating of networks as well as experience working on service desks in a customer-facing role, part of a fast-paced environment.
The applicant should have a diverse background in management & configuration of various types of software & cloud platforms and is a quick learner when it comes to exposure to new systems and working methodologies.
Strong English written and verbal communication skills, intermediate Linux skills & solid proficiency in Microsoft`s common stack of software is a requirement.
Monthly alternating US/APAC working hours.
At Kroll, your work will help deliver clarity to our clients’ most complex governance, risk, and transparency challenges. Apply now to join One team, One Kroll.
DAY-TO-DAY RESPONSIBILITIES:
Ownership for assigned technical issues, owning remediation
Support more junior members of the team with the platform and toolset understanding
Support other team members with tickets where needed
Handle more technically challenging tickets / requirements as they arise
Administration, diagnosis and troubleshooting of log sources / endpoints
Perform platform health monitoring and logic definition
Support onboarding team where possible with technical escalations
Troubleshoot issues with customers directly
Documentation various aspects of the platform, creating runbooks for more junior engineers to follow to free up more senior engineers.
Gain knowledge in areas the team needs to expand on and share this with the team in the form of training & documentation
Requirement & Skills Review
Required:
Expert level troubleshooting and diagnosis skills
In depth understanding of CrowdStrike ecosystem of modules
Significant experience in managing CrowdStrike EDR
Significant experience in managing CrowdStrike Next-Gen SIEM & its data ingestion
Solid working knowledge of CrowdStrike’s query / programming languages
Certified to CrowdStrike level CCFA + CCSE
Solid understanding of TCP/IP networks and diagnosing network issues
Intermediate understanding of next gen firewalls, how they work and diagnosing traffic issues
Intermediate understanding of configuration for PKI and certificates generally
Intermediate understanding for the full scope of cyber components / toolsets (SIEM, EDR, IDS, IPS, Next Gen FW Etc)
Solid Linux command line knowledge & experience
Experience in dealing with customers directly to resolve issues
A strong sense of ownership of problems, seeing them through to remediation
Fast learner, able to pick up and work on numerous new platforms without prior experience
Strong documentation and runbook creation skills.
Strong written and verbal English communication
Working understanding of ITIL / ISO27001 & change control, with the ability to write detailed changes for complex technical tasks
Desirable:
Experience with Onum
Experience with Darktrace
Experience with Qualys
Experience working in an MSSP MDR environment
Experience in mentoring, guiding more junior members of the team
Experience in cloud platforms (Office 365, AWS, GCP etc)
Experience with Microsoft Sentinel
Regex / Parsing experience
Any security vendor certification, networking etc
Experience in scripting (preferably Python, PowerShell & Bash)
About Kroll
Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore and maximize our clients’ value? Your journey begins with Kroll.
Kroll is committed to equal opportunity and diversity, and recruits people based on merit.
In order to be considered for a position, you must formally apply via careers.kroll.com
#LI-IW1
#LI-Hybrid
Skills Required
- Expert-level troubleshooting and diagnosis skills
- In-depth understanding of the CrowdStrike ecosystem and modules
- Significant experience managing CrowdStrike EDR
- Significant experience managing CrowdStrike Next-Gen SIEM and data ingestion
- Solid working knowledge of CrowdStrike query and programming languages
- CrowdStrike CCFA and CCSE certifications
- Solid understanding of TCP/IP networks and network issue diagnosis
- Intermediate understanding of next-generation firewalls and traffic issue diagnosis
- Intermediate understanding of PKI and certificate configuration
- Intermediate understanding of cybersecurity components including SIEM, EDR, IDS, IPS, and next-generation firewalls
- Solid Linux command-line knowledge and experience
- Experience resolving issues directly with customers
- Strong ownership of problems through remediation
- Ability to learn and work across multiple new platforms
- Strong documentation and runbook creation skills
- Strong written and verbal English communication skills
- Working knowledge of ITIL, ISO 27001, and change control
- Ability to write detailed change requests for complex technical tasks
- Experience with Onum
- Experience with Darktrace
- Experience with Qualys
- Experience in an MSSP MDR environment
- Experience mentoring or guiding junior team members
- Experience with cloud platforms such as Office 365, AWS, or GCP
- Experience with Microsoft Sentinel
- Regex and parsing experience
- Additional security vendor or networking certifications
- Scripting experience, preferably Python, PowerShell, and Bash
Kroll Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Kroll and has not been reviewed or approved by Kroll.
-
Healthcare Strength — Medical, dental, and vision coverage with HSA/FSA options are part of the U.S. package, alongside life and AD&D. Breadth across core health benefits is positioned as competitive for a large advisory firm.
-
Retirement Support — A 401(k) plan with company match is a core element of the package. Retirement support is consistently highlighted as competitive within total rewards.
-
Leave & Time Off Breadth — Paid holidays, sick leave, and PTO are included, with generous time off and parental/family leave for U.S. roles. Some roles also offer hybrid/WFH flexibility that complements time-off usability.
Kroll Insights
What We Do
Kroll is the world’s premier provider of services and digital products related to valuation, governance, risk and transparency. We work with clients across diverse sectors in the areas of valuation, expert services, investigations, cyber security, corporate finance, restructuring, legal and business solutions, data analytics and regulatory compliance. Our firm has nearly 5,000 professionals in 30 countries and territories around the world. For more information, visit www.kroll.com.
