Note: The job is a remote job and is open to candidates in USA. Kroll is a global provider of risk and financial advisory solutions. The Senior Manager, SIEM/SOAR Engineer will lead the delivery and operationalization of CrowdStrike Falcon and LogScale implementations, manage detection engineering and client delivery teams, and develop scalable MDR and Next Gen SIEM service models. The role also focuses on detection engineering, automation, client strategy, technology partnerships, and delivery performance.
Responsibilities
- Lead end-to-end delivery of CrowdStrike MDR and Next Gen SIEM (LogScale) implementations for enterprise and mid-market clients
- Define standard operating procedures, playbooks, and delivery frameworks for repeatable, scalable service delivery
- Manage and mentor detection engineers and consultants delivering client projects across CrowdStrike Falcon modules
- Oversee detection logic development, correlation rules, and SOC process optimization
- Partner with Kroll’s incident response and advisory teams to integrate post-incident detection enhancements into ongoing MDR operations
- Develop and maintain CrowdStrike baseline configurations, deployment templates, and automation accelerators (Terraform, Ansible, PowerShell)
- Interface directly with client executives and technical stakeholders to translate business risk into detection and response strategies
- Collaborate with technology alliances (CrowdStrike, Microsoft, etc.) on co-developed service offerings and go-to-market enablement
- Track delivery metrics, SLAs, and client satisfaction to continuously improve program maturity and profitability
Skills
- 7–10+ years of experience in cybersecurity delivery, operations, or consulting (preferably within MDR, SOC, or detection engineering programs)
- Proven track record leading teams deploying CrowdStrike Falcon and CrowdStrike LogScale technologies
- Strong understanding of SIEM/SOAR operations, detection logic, and threat response workflows
- Experience designing or maturing MDR service models (process, metrics, automation, and reporting)
- Proficiency in Terraform, PowerShell, or Python for automation and configuration management
- Deep familiarity with multi-tenant operations, Flight Control, and Azure Lighthouse environments
- Excellent communication and presentation skills—comfortable interfacing with client CISOs and technical teams alike
- Experience in security consulting or managed services leadership (Big 4, MSSP, or global cyber provider preferred)
- CrowdStrike certifications (CCFA, CCFR, CCSA) or equivalent technical credentials
- Familiarity with Defender Suite integration and hybrid XDR architecture
- Knowledge of ROI modeling, efficiency metrics, and service-based automation frameworks
- Strong business acumen and the ability to link detection and response outcomes to client risk reduction and value realization
Benefits
- Comprehensive medical, dental, and vision plans.
- Generous paid time off (PTO)
- Paid company holidays
- Generous parental and family leave
- Life insurance
- Short- and long-term disability coverage
- Accident protection
- Performance-based incentives
- Merit-based compensation reviews
- 401(k) plans with company matching
Company Overview
Company H1B Sponsorship