Director, Incident Response

Kroll; United States; On-site; USD 200,000 - 250,000; Full time

Benefits offered by this job

Healthcare Coverage

Paid time off

Parental and family leave

Life insurance

Disability coverage

401(k) plans

Job summary

Kroll is seeking a Director to lead Digital Forensics and Incident Response within its Cyber & Data Resilience Practice in the United States. You will guide incident response engagements, mentor teams, and work with senior staff to deliver high-quality service for a global client base.

The role emphasizes strategy, client leadership, and delivering tangible outcomes. You will oversee complex cases, manage resources and budgets, and ensure adherence to Kroll’s standards of service and integrity.

Qualifications

• Six years of incident response experience, preferably in a consultancy
• Certifications such as CREST IR, CFCE, ENCE, GIAC (GCFA, GCIH, GREM, GNFA) are beneficial
• Fluency in English and other languages is advantageous
• Ability to manage complex cases, budget, and multiple projects simultaneously
• Strong project management and stakeholder communication skills

Responsibilities

• Delivery of strong technical skills in cyber defense or incident response assignments.
• As Case Manager, structure projects, manage resources, present findings, and provide actionable client advice.
• Monitor quality of own work and ensure value is delivered to the client.
• Communicate regularly with senior team members to raise issues and decisions.
• Develop and maintain key client relationships with high standards of service and integrity.
• Mentor staff to uphold Kroll’s standards.
• Ensure KPIs (utilization, business generation, personal objectives) are met.
• Identify learning needs and seek performance improvements.

Skills

Incident Response

Computer Forensics

Network Security

Computer Security Audit

Project management

Client relationships

Fluent English

Certifications (CREST IR)

Job description

We are looking for talented individuals with solid knowledge of Digital Forensics and Incident Response to join our Cyber & Data Resilience Practice as a Director! As a Director at Kroll, you will provide support and guidance to a wide variety of clients in managing their Incident Response Engagement. You will work alongside accomplished senior staff, enhancing your own DFIR expertise, while mentoring team members and delivering excellent service. You will be part of an award-winning and respected team supporting a global network of clients and colleagues.

Kroll’s elite security leaders deliver rapid responses for over 2,000 incidents per year and have the resources and expertise to support the entire incident lifecycle, including litigation demands.

Day-to-day Responsibilities

• Delivery of strong technical skills in support of cyber defense or incident response assignments.

• As Case Manager in the effective running of an assignment through to its closure, providing input to structuring projects, managing resources, presenting findings and providing commercially viable advice to the client.

• Monitors quality of own work and that of the assignment team, and ensures value is delivered to the client.

• Communicates regularly to senior members of the team, bringing case issues and findings to attention of appropriate personnel for resolution and decision making.

• Develop and maintain key client relationships, ensuring Kroll’s high standards of service and integrity are adhered to at all times.

• Support the development of staff by acting as mentor and ensuring Kroll’s high standards are met at all times.

• Ensure Key Performance Indicators (consisting of utilization rates, business generation and personal objectives) are consistently achieved.

• Identify own learning needs and opportunities, and continuously seek to improve personal performance.

Essential Traits:

• We are currently looking for individuals that hold the following skill and expertise:

  • Incident Response
  • Computer Forensics
  • Network Security
  • Computer Security Audit

• The individual must possess excellent project management skills, with ability to communicate effectively and build strong working relationships with both clients and colleagues across Kroll’s network of offices.

• Recommended six (6) years incident response experience investigating and remediating cyberbreaches, preferably in a consultancy position.

• Desired qualifications: CREST IR, CFCE, ENCE, GIAC or other certification(s) would be beneficial (GCFA, GCIH, GREM, GNFA).

• Fluency in English is required together with fluency or native capability in the language of the country in which they will be based. Another language would be advantageous.

• Extensive experience of managing complex cases and successfully managing resources and budget.

• Ability to drive forward and co-ordinate a number of concurrent projects and tasks, managing competing demands.

• Clarity of thought and expression to win confidence from key stakeholders and colleagues.

• A highly professional and commercial approach to problem solving.

• Due to the range of assignments that you will manage across various industry-sectors and country locations, a key interest in global events and markets, with an awareness of working across different cultural and political environments is essential.

• Excellent written and verbal communication skills that help represent diverse communities.

• Experience working with diverse teams.

Your recruiter will be happy to walk you through your U.S.-specific benefits, which include:

• Healthcare Coverage: Comprehensive medical, dental, and vision plans.

• Time Off and Leave Policies: Generous paid time off (PTO), paid company holidays, generous parental and family leave.

• Protective Insurances: Life insurance, short- and long-term disability coverage, and accident protection.

• Compensation and Rewards: Competitive salary structures, performance-based incentives, and merit-based compensation reviews.

• Retirement Plans: 401(k) plans with company matching.

Please note that benefits may vary by region, department and role. We encourage you to speak with your recruiter to learn more about the specific benefits available for your position.

About Kroll

Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore and maximize our clients’ value? Your journey begins with Kroll.

In order to be considered for a position, you must formally apply via careers.kroll.com.

We are proud to be an equal opportunity employer and will consider all qualified applicants regardless of gender, gender identity, race, religion, color, nationality, ethnic origin, sexual orientation, marital status, veteran status, age or disability.

The current salary range for this position is $200,000 to $250,000