Jobs at Kroll

Performs portfolio valuation advisory for alternative investments, including building financial models using DCF, market multiples, transaction analyses, and option pricing. Conducts valuation analysis of illiquid investments, gathers client data, supports relationship management, and prepares reports and presentations. The role requires strong analytical, communication, Excel, financial modeling, and market-data skills, with attendance at relevant industry events.

Develop financial models and perform valuation analyses for illiquid alternative investments using DCF, market multiples, transactions, and option pricing. Conduct company and industry research, collaborate with clients and management, present findings in reports and meetings, and build expertise through industry events. The role requires strong analytical, communication, and financial modeling skills, along with proficiency in Microsoft Office, Bloomberg, and S&P Capital IQ.

Performs valuation analyses for public and private entities using discounted cash flow, market, transaction, and option pricing approaches. Builds financial models, researches industries and markets, gathers client data, supports presentations and proposals, and communicates findings. The role covers acquisitions, securities, purchase price allocations, intellectual property, impairment, intangible assets, and stock options.

Valuation Services Interns perform valuation analyses for public and private entities, build financial models using discounted cash flow, market multiple, transaction, and option pricing methods, conduct client and industry research, gather engagement data, and help prepare client presentations, proposals, and publications. The role involves direct client interaction and requires strong analytical, communication, Excel, and Word skills.

Performs quantitative consulting and financial modeling to solve business problems involving risk, valuation, investments, intellectual property, litigation, and growth strategies. Responsibilities include developing statistical and financial models, conducting research and interviews, analyzing data, running simulations, interpreting results, preparing reports and presentations, supporting client proposals, and managing analytical workstreams across multiple engagements.

The Vice President will manage projects in various sectors, draft expert reports, oversee team performance, and engage in client meetings and marketing events.

Manage complex digital event investigations and digital forensics engagements, supporting cases from scoping through closure. Responsibilities include forensic analysis, incident response, project and resource management, client communication, quality oversight, litigation support, mentoring junior staff, and coordinating concurrent assignments. The role requires expertise in computer, mobile, and cloud forensics, strong communication skills, commercial judgment, and availability to travel to client sites.

Analyzes open, deep, and dark web intelligence to investigate cyber threats, data leaks, fraud, brand abuse, and threat actors. Supports incident response through threat research, indicator enrichment, vulnerability assessment, and exposure monitoring. Produces actionable reports and briefings for technical and non-technical clients, communicates findings, tracks workstreams, and collaborates with global CTI and incident response teams in a consulting environment.

Lead global cyber operations and investigations, conduct threat intelligence and malware research, produce all-source assessments, automate OSINT collection, and communicate cyber risks to clients and stakeholders. Develop scalable intelligence processes, maintain threat knowledge bases, support detection engineering, analyze cyber trends, and mature threat intelligence methodologies while serving as a subject matter expert.

Conducts cyber threat intelligence investigations across open, deep, and dark web sources; analyzes data leaks, fraud, brand abuse, vulnerabilities, and threat actor activity. Supports incident response through threat research and indicator enrichment, monitors digital exposure, and delivers actionable reports and briefings to technical and non-technical clients. Collaborates with global CTI and incident response teams while managing multiple client workstreams and deadlines.

Analyzes, cleanses, validates, and prepares operational datasets for mailing, email, reporting, billing, and processing activities. Develops Databricks queries and Alteryx workflows to automate processes and improve data quality. Performs audits, reconciliations, root-cause analysis, and corrective actions while maintaining governance and security compliance. Provides actionable insights, mentors junior analysts, communicates findings, and leads continuous improvement initiatives.

Leads client-facing Identity Governance and Administration engagements from strategy through implementation. Architects SailPoint and Saviynt solutions covering identity lifecycle management, access certifications, RBAC, SoD, entitlement governance, provisioning, connectors, and compliance reporting. Advises executive stakeholders, leads delivery teams, manages engagement scope and quality, mentors IAM professionals, and supports business development. Integrates IGA with PAM and SSO/MFA technologies while developing governance roadmaps and target operating models.

Lead Kroll’s US Cyber Advisory practice by delivering cybersecurity strategy, risk, governance, resilience, regulatory, and AI advisory services. Advise executives and boards, lead complex engagements, oversee teams and deliverables, develop client relationships, support proposals and business development, shape service offerings, and mentor cybersecurity professionals.

Design, administer, and optimize a cyber threat intelligence platform. Build Python automation, ETL pipelines, APIs, and integrations that collect, enrich, normalize, correlate, and distribute intelligence from commercial, open-source, government, dark web, and internal sources. Apply STIX/TAXII and MITRE ATT&CK to track indicators, actors, malware, vulnerabilities, and campaigns. Develop dashboards and AI-assisted capabilities while ensuring data quality, governance, and security across intelligence repositories.

Supports financial investigations, litigation support, forensic accounting, compliance assessments, fraud risk evaluations, asset tracing, and internal investigations. Conducts interviews, analyzes financial records, tests internal controls, prepares client reports and presentations, performs quality control, and manages project priorities. The role also provides oversight to junior staff, supports client relationships and business development, and collaborates with investigative teams across Kroll’s offices.

Supports cyber defense and incident response assignments, including forensic investigations, breach remediation, case management, client communication, resource and budget coordination, quality assurance, and delivery of commercially viable advice. Mentors junior staff, manages concurrent projects, develops client relationships, meets performance objectives, and may travel frequently across regions and industries.

Conduct cyber defense and incident response assignments, including forensic investigations and breach remediation. Support case managers with project structure, resource and budget management, findings presentation, client communication, quality control, and commercially viable advice. Manage complex concurrent cases, mentor junior staff, build client relationships, and coordinate teams across global offices. Frequent travel may be required.

Lead delivery and scaling of CrowdStrike MDR and Next‑Gen SIEM (LogScale) services. Define SOPs, playbooks, and automation; manage and mentor detection engineers; develop detection logic, baseline configurations, deployment templates, and automation (Terraform/Ansible/PowerShell/Python). Interface with client executives, track SLAs/metrics, and collaborate on alliance and go‑to‑market initiatives to mature clients' detection and response capabilities.

Lead and grow Kroll's CrowdStrike Falcon Cloud Security deployment practice: deploy, configure, integrate, tune CNAPP across AWS/Azure/GCP, build detections and SOAR playbooks, validate coverage, mentor consultants, and hand off runbooks to operations.

Lead the CrowdStrike Identity Security consulting practice at Kroll by assessing, architecting, implementing identity solutions, mentoring consultants, and advising clients on identity strategy.