Cyber Defense Architect & SOC Manager

Kroll; United States; Hybride; USD 150 000 - 200 000; Plein temps

Avantages offerts par ce poste

Healthcare Coverage

Generous PTO & Holidays

401(k) with company match

Disability coverage

Résumé du poste

Kroll is seeking a Manager for Cyber Engineered Defense to lead CrowdStrike deployments, architecture designs, and advanced threat initiatives across large-scale environments. You will advise CISOs and executives, shaping security programs and incident response across financial services, manufacturing, and critical infrastructure sectors.

You will drive detection modernization, spearhead threat hunting, and deliver board-ready analytics while coordinating with global teams to ensure resilience

Qualifications

• 8+ years of hands-on cybersecurity experience, building and scaling global SOCs and leading enterprise incident response programs.
• Deep expertise in the CrowdStrike ecosystem (Falcon, OverWatch, Spotlight, LogScale).
• Ability to manage cross-functional teams and communicate cyber risk to the C-suite and Board of Directors.
• Strong background in network and detection engineering (YARA, SIGMA, Zeek, Suricata, Detection-as-Code).
• Proficiency in programming/scripting (Python, SQL, Bash) for security automation and tool development.
• Bachelor’s degree in a relevant field or equivalent professional experience.

Responsabilités

• Lead complex, large-scale CrowdStrike deployments and architecture designs in enterprise environments.
• Direct and execute Compromise and Hygiene Assessments using CrowdStrike Falcon.
• Modernize detection infrastructures by engineering data pipelines to Next-Gen SIEMs (CrowdStrike LogScale).
• Provide premier SOC consulting, including 24/7 global SOC design, launch, and operation with QA frameworks.
• Lead advanced threat hunting and Purple Team exercises to validate logs and close gaps.
• Design Cyber Analytics programs translating metrics into board-level security reporting.

Connaissances

CrowdStrike ecosystem

Leadership / cross-functional teams

Security operations design

Security automation (Python/SQL/Bash)

C-suite communication

Formation

Bachelor's degree in a relevant field

Outils

CrowdStrike Falcon

CrowdStrike LogScale

YARA

SIGMA

Zeek

Suricata

Detection-as-Code

Description du poste

Manager, Cyber Engineered Defense (CrowdStrike Services)

Cybersecurity

Cybersecurity | United States | 21014901

Share This

At Kroll, we provide reactive, advisory, transformation, and managed security services to support clients at every stage of their path toward cyber and data resilience maturity. Our experts bring decades of experience in cyber risk consultancy, helping organizations across the world simplify and reduce the complexity of implementing, transforming, and managing their cyber programs. Through our strategic multi-year partnership with CrowdStrike, we combine world-class investigative expertise with an AI-native platform to redefine the future of managed detection and response, delivering faster outcomes, stronger protection, and greater resilience for organizations worldwide.

The Engineered Defense capability is seeking a specialized Manager to drive our CrowdStrike consulting services. You will act as a trusted advisor to CISOs and executive stakeholders across financial services, consumer goods, and critical infrastructure sectors. This role focuses heavily on the architecture and deployment of CrowdStrike technologies (including Falcon Complete and LogScale Next-Gen SIEM), conducting advanced compromise and hygiene assessments, threat hunting, and modernizing Security Operations Centers (SOC).

Key Responsibilities:

• Lead complex, large-scale CrowdStrike deployments and architecture designs, including highly complex or OT-heavy enterprise environments spanning hundreds of thousands of endpoints.

• Direct and execute Compromise and Hygiene Assessments leveraging CrowdStrike Falcon to establish visibility, identify active threats, and deliver actionable intelligence to executive leadership.

• Modernize client detection infrastructures by engineering pipelines to collect, standardize, and forward events into Next-Gen SIEMs, specifically CrowdStrike LogScale.

• Provide premier SOC consulting services, including the design, launch, and operationalization of 24/7 global Security Operations Centers, complete with automated quality assurance frameworks.

• Lead advanced threat hunting initiatives and annual Purple Team exercises to validate logging, uncover emerging attacker tactics, and close detection gaps.

• Design and implement Cyber Analytics programs that translate technical metrics into board-level security reporting, securing executive buy-in and organizational funding.

• Serve as an Incident Commander during active breaches, coordinating with stakeholders and maintaining business continuity throughout containment and recovery.

Requirements:

• 8+ years of hands-on experience in cybersecurity, specifically building and scaling global Security Operations Centers and leading enterprise-wide incident response programs.

• Deep expertise in the CrowdStrike ecosystem (Falcon, OverWatch, Spotlight, LogScale).

• Demonstrated ability to manage cross-functional teams and communicate complex cyber risk to the C-suite and Board of Directors.

• Strong background in network and detection engineering (YARA, SIGMA, Zeek, Suricata, Detection-as-Code).

• Proficiency in programming and scripting (Python, SQL, Bash) for security automation and tool development.

• Bachelor’s degree in a relevant field or equivalent professional experience.

Preferred Qualifications

• Proven experience developing and deploying AI-driven security innovations, such as autonomous detection engineering, AI-powered YARA agents, or XSOAR machine learning integrations.

• Recognized subject matter expertise in AI threats, adversarial obfuscation, and prompt injection (e.g., speaking engagements at major conferences like FS-ISAC).

• Prior experience in a professional services or consulting firm, including client onboarding, architecture discussions, and pre-sales scoping.

• Active or prior industry certifications (e.g., GCIA, CISSP).

Healthcare Coverage: Comprehensive medical, dental, and vision plans.

Time Off and Leave Policies: Generous paid time off (PTO), paid company holidays, generous parental and family leave.

Protective Insurances: Life insurance, short- and long-term disability coverage, and accident protection.

Compensation and Rewards: Competitive salary structures, performance-based incentives, and merit-based compensation reviews.

Retirement Plans: 401(k) plans with company matching.

Please note that benefits may vary by region, department and role. We encourage you to speak with your recruiter to learn more about the specific benefits available for your position.

About Kroll

Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore and maximize our clients’ value? Your journey begins with Kroll.

We are proud to be an equal opportunity employer and will consider all qualified applicants regardless of gender, gender identity, race, religion, color, nationality, ethnic origin, sexual orientation, marital status, veteran status, age or disability.