Senior Manager, Threat Intelligence
Kroll · London
Senior Manager, Threat Intelligence
USA remote; full-time / permanent.
Kroll’s Cyber team works on over 3,000 cases a year, including some of the most complex and highest profile matters in the world. With experts based around the world, supported by ground-breaking technology, we help protect our client’s data, people, operations and reputation with innovative assessments, investigations and intelligence. We are the only company in the world with the expertise and resources to deliver global, end-to-end cyber risk management, supporting organizations through every step of their journey toward cyber resilience. We are looking for bright, inquisitive minds who are experienced in and passionate about modern cyber threat hunting and response. Our Consultants use leading endpoint and network monitoring tools to identify, analyze, and respond to a variety of threats and threat actors impacting systems and networks around the globe.
RESPONSIBILITIES:
Lead and support a variety of global cyber operations and investigations
Keep abreast of cyber market trends and competitive intelligence through research and the culling of resources from our partners
Ability to clearly communicate technical findings to a variety of clients and internal stakeholders
Assist in developing the capabilities of the Threat Intelligence team, creating scalable processes through automation, contributing to malware and threat actor research, and working with the Applied Intelligence group to protect customers.
Be intelligence-led and work with the detection engineering team mitigate the latest threats.
Maintain and contribute to an ever-growing knowledge base of threat intelligence information, write-ups, malware and vulnerability research.
Work with customers to communicate risks, present changes in the threat landscape and identify potential areas of improvement based on real world incidents and reporting.
Be an SME point of contact for internal and customer queries about threats and vulnerabilities.
Automate and triage OSINT intelligence collection to our centralized database of indicators of compromise.
Produce all-source intelligence reports and threat assessments
Build presentations for diverse audiences, ranging from private industry to law enforcement
Perform weekly, quarterly and yearly statistical analysis of trends in cyber analytics
Escalate client issues appropriately that could threaten or enhance opportunity to the Kroll/client relationship
Assist the Head of Threat Intelligence in maturing threat intelligence methodologies
QUALIFICATIONS:
- Bachelor’s degree required; Master’s degree or similar advanced degree is preferred
- 5 years+ of relevant work experience in cyber security and/or threat intelligence
- Understand prevailing threats and how to mitigate them with EDR and SIEM.
- Aptitude with analyzing threats using malware analysis, sandboxing, static code examination or similar.
- Familiarity with the Mitre ATT&CK framework.
- In-depth knowledge of the security threat landscape including types of malware, threat actors, their methods of operation and common TTPs.
- Experience in relaying complex technical subject matter to non-technical stakeholders.
- Proven ability to thrive and respond to frequent demands of multiple constituents, both internal and external, in a high demand, customer-centric environment.
- Ability to condense complex information into concise, relevant reporting.
- Proficient in a broad variety of investigative methods.
Must be proficient in MS office products, i.e. Word, Excel, PowerPoint.
Ability to handle difficult situations in a productive manner
Ability to multi-task, prioritize, and manage time effectively
Experience working with diverse teams
In order to be considered for a position at Kroll, you must formally apply via careers.duffandphelps.jobs
Kroll is committed to creating an inclusive work environment. We are proud to be an equal opportunity employer and will consider all qualified applicants regardless of gender, gender identity, race, religion, color, nationality, ethnic origin, sexual orientation, marital status, veteran status, age or disability.
#LI-TM1
#LI-Remote