Senior Associate, Security Engineer

Kroll Global Solutions Inc.; Manila; On-site; PHP 700,000 - 1,100,000; Full time

Job summary

Kroll Global Solutions Inc. is seeking an enthusiastic cyber security engineer to join our security platform operations for a large MSSP.

You’ll be hands-on with virtual and physical infrastructure, networks, and a diverse set of software/cloud platforms while supporting a fast-paced service-desks environment. The role requires strong English communication, intermediate Linux skills, and solid proficiency with the Microsoft stack.

Qualifications

• Expert level troubleshooting and diagnosis skills.
• In-depth understanding of CrowdStrike ecosystem and modules.
• Significant experience managing CrowdStrike EDR.
• Significant experience managing CrowdStrike Next-Gen SIEM and its data ingestion.
• Solid knowledge of TCP/IP networks and IT security concepts.
• Strong written and spoken English communication.

Responsibilities

• Ownership for assigned technical issues, driving remediation.
• Mentor junior team members on platform and toolsets.
• Handle tickets and provide escalation support when needed.
• Diagnose and troubleshoot log sources and endpoints.
• Monitor platform health and define remediation logic.
• Document platform aspects and create runbooks for others.
• Assist onboarding with technical escalations and customer communications.

Skills

CrowdStrike EDR

CrowdStrike Next-Gen SIEM

CCFA

CCSE

TCP/IP networks

Linux

Windows/Microsoft stack

Customer facing

ITIL ISO27001

Scripting (Python, PowerShell, Bash)

Tools

CrowdStrike platform

SIEM tooling

Firewalls

PKI / Certificates

Job description

About the role

We are looking for an enthusiastic cyber security engineer that wishes to make the move into security platform operations for a large MSSP. The applicant should be highly proficient with virtual & physical infrastructure operations, have a good understanding of networks as well as experience working on service desks in a customer facing role, part of a fast-paced environment. The applicant should have a diverse background in the management & configuration of various types of software & cloud platforms and is a quick learner when it comes to exposure to new systems and working methodologies.

Strong English written and verbal communication skills, intermediate Linux skills & solid proficiency in Microsoft`s common stack of software is a requirement.

Monthly alternating US/APAC working hours.

At Kroll, your work will help deliver clarity to our clients’ most complex governance, risk, and transparency challenges.

Key responsibilities

• Ownership for assigned technical issues, owning remediation
• Support more junior members of the team with the platform and toolset understanding
• Support other team members with tickets where needed
• Handle more technically challenging tickets / requirements as they arise
• Administration, diagnosis and troubleshooting of log sources / endpoints
• Perform platform health monitoring and logic definition
• Support onboarding team where possible with technical escalations
• Troubleshoot issues with customers directly
• Documentation various aspects of the platform, creating runbooks for more junior engineers to follow to free up more senior engineers
• Gain knowledge in areas the team needs to expand on and share this with the team in the form of training & documentation

Requirement & Skills Review

Required:

• Expert level troubleshooting and diagnosis skills
• In depth understanding of CrowdStrike ecosystem of modules
• Significant experience in managing CrowdStrike EDR
• Significant experience in managing CrowdStrike Next-Gen SIEM & its data ingestion
• Solid working knowledge of CrowdStrike’s query / programming languages
• Certified to CrowdStrike level CCFA + CCSE
• Solid understanding of TCP/IP networks and diagnosing network issues
• Intermediate understanding of next gen firewalls, how they work and diagnosing traffic issues
• Intermediate understanding of configuration for PKI and certificates generally
• Intermediate understanding for the full scope of cyber components / toolsets (SIEM, EDR, IDS, IPS, Next Gen FW Etc)
• Solid Linux command line knowledge & experience
• Experience in dealing with customers directly to resolve issues
• A strong sense of ownership of problems, seeing them through to remediation
• Fast learner, able to pick up and work on numerous new platforms without prior experience
• Strong documentation and runbook creation skills.
• Strong written and verbal English communication
• Working understanding of ITIL / ISO27001 & change control, with the ability to write detailed changes forcomplex technical tasks

Desirable:

• Experience with Onum
• Experience with Darktrace
• Experience with Qualys
• Experience working in an MSSP MDR environment
• Experience in mentoring, guiding more junior members of the team
• Experience in cloud platforms (Office 365, AWS, GCP etc)
• Experience with Microsoft Sentinel
• Regex / Parsing experience
• Any security vendor certification, networking etc
• Experience in scripting (preferably Python, PowerShell & Bash)

About Kroll

Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore and maximize our clients' value? Your journey begins with Kroll.

Kroll is committed to equal opportunity and diversity, and recruits people based on merit.