Jobs at Kroll

Leads transaction advisory and financial due diligence engagements by analyzing target companies’ financial and operational performance, identifying deal risks and purchase price adjustments, supporting restructuring and post-acquisition planning, developing client relationships, and overseeing complex report writing. The role also includes business development, team supervision, client communication, and occasional travel.

Leads buy-side and sell-side financial due diligence engagements for private equity, lender, and corporate clients. Analyzes earnings, working capital, debt, historical trends, and transaction risks; supports deal restructuring and post-acquisition improvements. Develops client relationships and new business, contributes to complex report writing, and mentors junior team members.

Perform financial due diligence and analysis across transactions, identify issues affecting purchase price or deal structure, recommend post-acquisition improvements, support report writing, develop client relationships, and identify new business opportunities.

The Vice President will manage projects in various sectors, draft expert reports, oversee team performance, and engage in client meetings and marketing events.

Vice President manages client engagements, conducting research and analysis in litigation consulting, and preparing expert testimony and reports. Requires leadership and analytical skills, with a degree in Economics or Finance and 4-5 years experience.

Manage complex digital event investigations and digital forensics engagements, supporting cases from scoping through closure. Responsibilities include forensic analysis, incident response, project and resource management, client communication, quality oversight, litigation support, mentoring junior staff, and coordinating concurrent assignments. The role requires expertise in computer, mobile, and cloud forensics, strong communication skills, commercial judgment, and availability to travel to client sites.

Analyzes open, deep, and dark web intelligence to investigate cyber threats, data leaks, fraud, brand abuse, and threat actors. Supports incident response through threat research, indicator enrichment, vulnerability assessment, and exposure monitoring. Produces actionable reports and briefings for technical and non-technical clients, communicates findings, tracks workstreams, and collaborates with global CTI and incident response teams in a consulting environment.

Lead global cyber operations and investigations, conduct threat intelligence and malware research, produce all-source assessments, automate OSINT collection, and communicate cyber risks to clients and stakeholders. Develop scalable intelligence processes, maintain threat knowledge bases, support detection engineering, analyze cyber trends, and mature threat intelligence methodologies while serving as a subject matter expert.

Conducts cyber threat intelligence investigations across open, deep, and dark web sources; analyzes data leaks, fraud, brand abuse, vulnerabilities, and threat actor activity. Supports incident response through threat research and indicator enrichment, monitors digital exposure, and delivers actionable reports and briefings to technical and non-technical clients. Collaborates with global CTI and incident response teams while managing multiple client workstreams and deadlines.

Analyzes, cleanses, validates, and prepares operational datasets for mailing, email, reporting, billing, and processing activities. Develops Databricks queries and Alteryx workflows to automate processes and improve data quality. Performs audits, reconciliations, root-cause analysis, and corrective actions while maintaining governance and security compliance. Provides actionable insights, mentors junior analysts, communicates findings, and leads continuous improvement initiatives.

Leads client-facing Identity Governance and Administration engagements from strategy through implementation. Architects SailPoint and Saviynt solutions covering identity lifecycle management, access certifications, RBAC, SoD, entitlement governance, provisioning, connectors, and compliance reporting. Advises executive stakeholders, leads delivery teams, manages engagement scope and quality, mentors IAM professionals, and supports business development. Integrates IGA with PAM and SSO/MFA technologies while developing governance roadmaps and target operating models.

Lead Kroll’s US Cyber Advisory practice by delivering cybersecurity strategy, risk, governance, resilience, regulatory, and AI advisory services. Advise executives and boards, lead complex engagements, oversee teams and deliverables, develop client relationships, support proposals and business development, shape service offerings, and mentor cybersecurity professionals.

Design, administer, and optimize a cyber threat intelligence platform. Build Python automation, ETL pipelines, APIs, and integrations that collect, enrich, normalize, correlate, and distribute intelligence from commercial, open-source, government, dark web, and internal sources. Apply STIX/TAXII and MITRE ATT&CK to track indicators, actors, malware, vulnerabilities, and campaigns. Develop dashboards and AI-assisted capabilities while ensuring data quality, governance, and security across intelligence repositories.

Supports financial investigations, litigation support, forensic accounting, compliance assessments, fraud risk evaluations, asset tracing, and internal investigations. Conducts interviews, analyzes financial records, tests internal controls, prepares client reports and presentations, performs quality control, and manages project priorities. The role also provides oversight to junior staff, supports client relationships and business development, and collaborates with investigative teams across Kroll’s offices.

Supports cyber defense and incident response assignments, including forensic investigations, breach remediation, case management, client communication, resource and budget coordination, quality assurance, and delivery of commercially viable advice. Mentors junior staff, manages concurrent projects, develops client relationships, meets performance objectives, and may travel frequently across regions and industries.

Conduct cyber defense and incident response assignments, including forensic investigations and breach remediation. Support case managers with project structure, resource and budget management, findings presentation, client communication, quality control, and commercially viable advice. Manage complex concurrent cases, mentor junior staff, build client relationships, and coordinate teams across global offices. Frequent travel may be required.

Lead delivery and scaling of CrowdStrike MDR and Next‑Gen SIEM (LogScale) services. Define SOPs, playbooks, and automation; manage and mentor detection engineers; develop detection logic, baseline configurations, deployment templates, and automation (Terraform/Ansible/PowerShell/Python). Interface with client executives, track SLAs/metrics, and collaborate on alliance and go‑to‑market initiatives to mature clients' detection and response capabilities.

Lead and grow Kroll's CrowdStrike Falcon Cloud Security deployment practice: deploy, configure, integrate, tune CNAPP across AWS/Azure/GCP, build detections and SOAR playbooks, validate coverage, mentor consultants, and hand off runbooks to operations.

Lead the CrowdStrike Identity Security consulting practice at Kroll by assessing, architecting, implementing identity solutions, mentoring consultants, and advising clients on identity strategy.

Lead and manage complex financial investigations, forensic accounting, and regulatory compliance engagements. Oversee case teams, conduct investigative interviews and internal control testing, write client-facing reports, manage client relationships, and drive business development while ensuring high standards of case delivery and team development.