Senior SIEM/MDR Delivery Lead

Kroll; Northern (KY); Hybrid; USD 140,000 - 230,000; Full time

Benefits offered by this job

Healthcare coverage

Generous PTO

401(k) with company match

Job summary

Kroll’s Cyber Data & Resilience practice is building a high-growth CrowdStrike MDR and Next Gen SIEM enablement delivery model. As a Senior Manager / Principal Consultant, you will lead a team of detection engineers and consultants deploying CrowdStrike Falcon and LogScale, and drive repeatable delivery and operational excellence for enterprise clients.

You will design repeatable delivery frameworks, mentor staff, partner with incident response and advisory teams, and translate business risk

Qualifications

• 10+ years in cybersecurity delivery, operations, or consulting.
• Proven leadership delivering CrowdStrike Falcon and LogScale projects.
• Strong SIEM/SOAR knowledge and incident response experience.

Responsibilities

• Lead end-to-end delivery of CrowdStrike MDR and Next Gen SIEM implementations for clients.
• Define SOPs, playbooks, and delivery frameworks for scalable service delivery.
• Mentor detection engineers and consultants on projects and best practices.
• Oversee detection logic, rules, and SOC process optimization.
• Collaborate with incident response and advisory teams to integrate detections.
• Develop deployment templates and automation accelerators (Terraform, Ansible, PowerShell).
• Interface with client executives to translate risk into detection and response strategies.
• Track delivery metrics, SLAs, and client satisfaction to improve maturity and profitability.

Skills

CrowdStrike Falcon

CrowdStrike LogScale

Automation

Terraform

Ansible

PowerShell

Python

MDR Delivery

SOC Operations

Tools

Terraform

Ansible

PowerShell

Python

Job description

Kroll’s Cyber Data & Resilience practice is building a high-growth CrowdStrike MDR and Next Gen SIEM enablement delivery model. As a Senior Manager / Principal Consultant, you will lead a team of detection engineers and consultants deploying CrowdStrike Falcon and LogScale, and drive repeatable delivery and operational excellence for enterprise clients.

You will design repeatable delivery frameworks, mentor staff, partner with incident response and advisory teams, and translate business risk