Senior Associate, Cyber Risk
Kroll · Manila, Philippines · 1mo ago
We are looking for an enthusiastic cyber security engineer that wishes to make the move into security platform operations for a large MSSP.
The applicant should be highly proficient with virtual & physical infrastructure operations, have a good understating of networks as well as experience working on service desks in a customer-facing role, part of a fast-paced environment.
The applicant should have a diverse background in management & configuration of various types of software & cloud platforms and is a quick learner when it comes to exposure to new systems and working methodologies.
Strong English written and verbal communication skills, intermediate Linux skills & solid proficiency in Microsoft`s common stack of software is a requirement.
Monthly alternating US/APAC working hours.
At Kroll, your work will help deliver clarity to our clients’ most complex governance, risk, and transparency challenges. Apply now to join One team, One Kroll.
DAY-TO-DAY RESPONSIBILITIES:
Ownership for assigned technical issues, owning remediation
Support more junior members of the team with the platform and toolset understanding
Support other team members with tickets where needed
Handle more technically challenging tickets / requirements as they arise
Administration, diagnosis and troubleshooting of log sources / endpoints
Perform platform health monitoring and logic definition
Support onboarding team where possible with technical escalations
Troubleshoot issues with customers directly
Documentation various aspects of the platform, creating runbooks for more junior engineers to follow to free up more senior engineers.
Gain knowledge in areas the team needs to expand on and share this with the team in the form of training & documentation
Requirement & Skills Review
Required:
Expert level troubleshooting and diagnosis skills
In depth understanding of CrowdStrike ecosystem of modules
Significant experience in managing CrowdStrike EDR
Significant experience in managing CrowdStrike Next-Gen SIEM & its data ingestion
Solid working knowledge of CrowdStrike’s query / programming languages
Certified to CrowdStrike level CCFA + CCSE
Solid understanding of TCP/IP networks and diagnosing network issues
Intermediate understanding of next gen firewalls, how they work and diagnosing traffic issues
Intermediate understanding of configuration for PKI and certificates generally
Intermediate understanding for the full scope of cyber components / toolsets (SIEM, EDR, IDS, IPS, Next Gen FW Etc)
Solid Linux command line knowledge & experience
Experience in dealing with customers directly to resolve issues
A strong sense of ownership of problems, seeing them through to remediation
Fast learner, able to pick up and work on numerous new platforms without prior experience
Strong documentation and runbook creation skills.
Strong written and verbal English communication
Working understanding of ITIL / ISO27001 & change control, with the ability to write detailed changes for complex technical tasks
Desirable:
Experience with Onum
Experience with Darktrace
Experience with Qualys
Experience working in an MSSP MDR environment
Experience in mentoring, guiding more junior members of the team
Experience in cloud platforms (Office 365, AWS, GCP etc)
Experience with Microsoft Sentinel
Regex / Parsing experience
Any security vendor certification, networking etc
Experience in scripting (preferably Python, PowerShell & Bash)
About Kroll
Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore and maximize our clients’ value? Your journey begins with Kroll.
Kroll is committed to equal opportunity and diversity, and recruits people based on merit.
In order to be considered for a position, you must formally apply via careers.kroll.com
#LI-IW1
#LI-Hybrid