Senior Associate, Security Engineer

We are looking for an enthusiastic cyber security engineer that wishes to make the move into security platform operations for a large MSSP.

The applicant should be highly proficient with virtual & physical infrastructure operations have a good understating of networks as well as experience working on service desks in a customer-facing role part of a fast-paced environment.

The applicant should have a diverse background in management & configuration of various types of software & cloud platforms and is a quick learner when it comes to exposure to new systems and working methodologies.

Strong English written and verbal communication skills intermediate Linux skills & solid proficiency in Microsofts common stack of software is a requirement.

Monthly alternating US/APAC working hours.

At Kroll your work will help deliver clarity to our clients most complex governance risk and transparency challenges. Apply now to join One team One Kroll.

DAY-TO-DAY RESPONSIBILITIES:

• Ownership for assigned technical issues owning remediation

• Support more junior members of the team with the platform and toolset understanding

• Support other team members with tickets where needed

• Handle more technically challenging tickets / requirements as they arise

• Administration diagnosis and troubleshooting of log sources / endpoints

• Perform platform health monitoring and logic definition

• Support onboarding team where possible with technical escalations

• Troubleshoot issues with customers directly

• Documentation various aspects of the platform creating runbooks for more junior engineers to follow to free up more senior engineers.

• Gain knowledge in areas the team needs to expand on and share this with the team in the form of training & documentation

Requirement & Skills Review

Required:

• Expert level troubleshooting and diagnosis skills

• In depth understanding of CrowdStrike ecosystem of modules

• Significant experience in managing CrowdStrike EDR

• Significant experience in managing CrowdStrike Next-Gen SIEM & its data ingestion

• Solid working knowledge of CrowdStrikes query / programming languages

• Certified to CrowdStrike level CCFA CCSE

• Solid understanding of TCP/IP networks and diagnosing network issues

• Intermediate understanding of next gen firewalls how they work and diagnosing traffic issues

• Intermediate understanding of configuration for PKI and certificates generally

• Intermediate understanding for the full scope of cyber components / toolsets (SIEM EDR IDS IPS Next Gen FW Etc)

• Solid Linux command line knowledge & experience

• Experience in dealing with customers directly to resolve issues

• A strong sense of ownership of problems seeing them through to remediation

• Fast learner able to pick up and work on numerous new platforms without prior experience

• Strong documentation and runbook creation skills.

• Strong written and verbal English communication

• Working understanding of ITIL / ISO27001 & change control with the ability to write detailed changes for complex technical tasks

Desirable:

• Experience with Onum

• Experience with Darktrace

• Experience with Qualys

• Experience working in an MSSP MDR environment

• Experience in mentoring guiding more junior members of the team

• Experience in cloud platforms (Office 365 AWS GCP etc)

• Experience with Microsoft Sentinel

• Regex / Parsing experience

• Any security vendor certification networking etc

• Experience in scripting (preferably Python PowerShell & Bash)

About Kroll

Join the global leader in risk and financial advisory solutionsKroll. With a nearly century-long legacy we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As a part of One Team One Kroll youll contribute to a collaborative and empowering environment propelling your career to new heights. Ready to build protect restore and maximize our clients value Your journey begins with Kroll.

Kroll is committed to equal opportunity and diversity and recruits people based on merit.

In order to be considered for a position you must formally apply via

#LI-IW1

#LI-Hybrid