> Markdown version of [/jobs/ext/1038486-manager-cyber-engineered-defense](https://www.wearedevelopers.com/jobs/ext/1038486-manager-cyber-engineered-defense). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Manager, Cyber Engineered Defense - **Company:** Kroll Inc - **Location:** New York, NY, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Data Analysis, Bash Shell, Cyber Security, Computer Programming, Intrusion Detection and Prevention, Python (Programming Language), Machine Learning, Security Information and Event Management, SQL Databases, Data Logging, Scripting, Cortex XSOAR Platform, Purple Team (Cyber Security), Security Orchestration, Automation & Response - **Published:** June 9, 2026 - **Apply:** https://www.disabledperson.com/jobs/72959973-manager-cyber-engineered-defense ## About the Role * 10+ years of hands-on experience in cybersecurity, specifically building and scaling global Security Operations Centers and leading enterprise-wide incident response programs. * Deep expertise in the CrowdStrike ecosystem (Falcon, OverWatch, Spotlight, LogScale). * Demonstrated ability to manage cross-functional teams and communicate complex cyber risk to the C-suite and Board of Directors. * Strong background in network and detection engineering (YARA, SIGMA, Zeek, Suricata, Detection-as-Code). * Proficiency in programming and scripting (Python, SQL, Bash) for security automation and tool development. * Bachelor's degree in a relevant field or equivalent professional experience. Preferred Qualifications: * Proven experience developing and deploying AI-driven security innovations, such as autonomous detection engineering, AI-powered YARA agents, or XSOAR machine learning integrations. * Recognized subject matter expertise in AI threats, adversarial obfuscation, and prompt injection (e.g., speaking engagements at major conferences like FS-ISAC). * Prior experience in a professional services or consulting firm, including client onboarding, architecture discussions, and pre-sales scoping. * Active or prior industry certifications (e.g., GCIA, CISSP). ## Description The Engineered Defense capability is seeking a specialized Senior Manager to drive our CrowdStrike consulting services. You will act as a trusted advisor to CISOs and executive stakeholders across financial services, consumer goods, and critical infrastructure sectors. This role focuses heavily on the architecture and deployment of CrowdStrike technologies (including Falcon Complete and LogScale Next-Gen SIEM), conducting advanced compromise and hygiene assessments, threat hunting, and modernizing Security Operations Centers (SOC)., * Lead complex, large-scale CrowdStrike deployments and architecture designs, including highly complex or OT-heavy enterprise environments spanning hundreds of thousands of endpoints. * Direct and execute Compromise and Hygiene Assessments leveraging CrowdStrike Falcon to establish visibility, identify active threats, and deliver actionable intelligence to executive leadership. * Modernize client detection infrastructures by engineering pipelines to collect, standardize, and forward events into Next-Gen SIEMs, specifically CrowdStrike LogScale. * Provide premier SOC consulting services, including the design, launch, and operationalization of 24/7 global Security Operations Centers, complete with automated quality assurance frameworks. * Lead advanced threat hunting initiatives and annual Purple Team exercises to validate logging, uncover emerging attacker tactics, and close detection gaps. * Design and implement Cyber Analytics programs that translate technical metrics into board-level security reporting, securing executive buy-in and organizational funding. * Serve as an Incident Commander during active breaches, coordinating with stakeholders and maintaining business continuity throughout containment and recovery. ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Old tools, new tricks](https://www.wearedevelopers.com/videos/1916-old-tools-new-tricks) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Build Delightful Mobile Experiences with Kotlin, Realm, and Atlas Device Sync](https://www.wearedevelopers.com/videos/694-build-delightful-mobile-experiences-with-kotlin-realm-and-atlas-device-sync) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)