Manager, Incident Response

What You’ll Do

What We’re Looking For

Why Kroll

Qualifications

• You are an experienced investigator and engagement leader, commercially astute and calm under pressure, with the judgement to direct a team, manage a client relationship and turn complex evidence into decisions clients can act on.
• 5+ years’ experience in incident response, digital forensics or cyber investigations, including demonstrable ownership of end-to-end engagements.
• Deep technical strength in incident response, forensics, malware analysis or network security, with the credibility to direct and quality-assure others’ work.
• Proven experience leading discussions with legal counsel, insurers and executive stakeholders in high-pressure, privileged environments.
• Consulting or professional services background with strong commercial judgement; relevant certifications are advantageous.
• Why Kroll
• Work on complex, high-profile incidents with recognised global DFIR experts.
• Own client relationships and engagement outcomes while developing the consultants around you.
• Help organisations respond to and recover from cyber crises.
• Ready to solve critical cyber challenges? We’d like to hear from you.
• Apply at careers.kroll.com.

Responsibilities

• Lead investigations into ransomware, data breaches, insider threats and business email compromise from initial triage through containment, recovery and final reporting.
• Act as engagement manager: own scope, budget, resourcing and delivery quality, and serve as the primary client contact throughout the matter.
• Direct forensic analysis across endpoints, networks, cloud and enterprise systems, and review the work of the wider investigation team.
• Lead conversations with external legal counsel, insurers and brokers, including briefings, status calls and defensible written reporting.
• You are an experienced investigator and engagement leader, commercially astute and calm under pressure, with the judgement to direct a team, manage a client relationship and turn complex evidence into decisions clients can act on.
• 5+ years’ experience in incident response, digital forensics or cyber investigations, including demonstrable ownership of end-to-end engagements.
• Deep technical strength in incident response, forensics, malware analysis or network security, with the credibility to direct and quality-assure others’ work.
• Proven experience leading discussions with legal counsel, insurers and executive stakeholders in high-pressure, privileged environments.
• Consulting or professional services background with strong commercial judgement; relevant certifications are advantageous.
• Work on complex, high-profile incidents with recognised global DFIR experts.
• Own client relationships and engagement outcomes while developing the consultants around you.
• Help organisations respond to and recover from cyber crises.
• Ready to solve critical cyber challenges? We’d like to hear from you.
• Apply at careers.kroll.com.
• #LI-TM1
• #LI-Remote