Kroll

• Own the product roadmap for the REAG Benchmarking Platform across the three-phase delivery plan (Foundation → KREV Integration & Internal Launch → GA & Expansion), spanning roughly 10 months from kickoff. • Translate benchmarking methodology into product requirements — metric definitions, segmentation logic, anonymization rules, and publication cadence — working with REAG subject-matter experts on validation. • Coordinate across functions: REAG practitioners, the India-based engineering team (backend, UI, data), Legal, and Business Development. • Manage data source integration across REAG's proprietary valuation systems and third-party index data, including normalization, deduplication, and historical coverage. • Define the KREV integration experience — both the dedicated Benchmarking module and the inline portfolio overlay on existing views. • Run the quarterly production cycle — data freeze dates, QA gates, publication calendar, and on-time delivery commitments to clients. • Drive pilot and GA launch with selected GP clients, incorporate feedback, and expand to the full KREV client base. • Track and report progress against coverage, adoption, and reliability targets. • Manage risk across data quality, licensing, segment depth, and SME availability, with documented mitigations.

Title: Senior Consultant, Red Team, Offensive Security Locations London, United Kingdom - Job Identification 21014120 - Job Category Cyber Security - Job Schedule Full time Job Description: In a world of disruption and increasingly complex business challenges, our professionals bring truth into focus with the Kroll Lens. Our sharp analytical skills, paired with the latest technology, allow us to give our clients clarity—not just answers—in all areas of business. We embrace diverse backgrounds and global perspectives, and we cultivate diversity by respecting, including, and valuing one another. As part of One team, One Kroll, you’ll contribute to a supportive and collaborative work environment that empowers you to excel. Our Offensive Security professionals are on a mission to make the world a safer place, one company at a time. We help our clients discover, understand, and remediate security risks across their networks, systems, applications, cloud environments, and identity platforms. Our clients trust us to use advanced offensive security tools, creativity, imagination, and expert knowledge to identify realistic attack paths and improve cyber resilience. We are looking to grow our UK Red Team capability with a Senior Consultant / L3 Red Team Operator. Our expertise in red team operations, purple team engagements, assumed-breach testing, adversary emulation, and threat intelligence-led penetration testing is in high demand. Our collaborative ties to our forensic and incident response team, detection engineering team, threat intelligence team, and wider Cyber Risk practice enable us to deliver high-impact offensive security engagements for clients across a range of sectors. This role will be based in the UK, with a hybrid working model requiring two days per week in one of our UK offices: London, Leeds, or Birmingham. Apply now to join One team, One Kroll. What you’ll do As a Senior Consultant, Red Team Operator, you will support the delivery of complex red team, purple team, assumed-breach, and adversary emulation engagements. You will work with clients to understand their environments, help define realistic attack objectives, develop attack paths, and execute authorised offensive security activity within agreed rules of engagement. You will be expected to operate across a range of attack surfaces, including enterprise networks, Active Directory, Microsoft Entra ID, Microsoft 365, cloud platforms, endpoints, externally exposed services, and, where authorised, social engineering scenarios. You will also help clients understand the business impact of identified attack paths and provide clear, actionable recommendations to improve prevention, detection, and response. In summary, you will: - Deliver red team, purple team, assumed-breach, and adversary emulation engagements for clients across multiple sectors - Support engagement planning, including threat-informed scenarios, attack objectives, rules of engagement, operational security considerations, and success criteria - Execute hands-on offensive activity across enterprise environments, including Active Directory exploitation, credential access, privilege escalation, lateral movement, and objective-based testing - Assess and exploit attack paths across Microsoft Entra ID, Microsoft 365, hybrid identity environments, AWS, Azure, GCP, and other cloud platforms, where in scope - Build, adapt, and operate red team infrastructure, command-and-control tooling, payloads, and scripts during authorised client engagements - Apply detection-aware tradecraft and understand how EDR, SIEM, identity protection, conditional access, email security, and network monitoring can affect red team operations - Support purple team engagements by executing agreed TTPs, working with client security teams, validating detection logic, and helping clients improve response capability - Conduct authorised social engineering activity, including reconnaissance, phishing, vishing, pretext development, and controlled initial access scenarios - Conduct research and development to improve Kroll’s red team tooling, tradecraft, methodology, and reporting - Produce clear, evidence-based reporting that explains attack paths, business impact, detection and response observations, and prioritised remediation actions - Present technical findings to security teams and communicate business risk to senior stakeholders - Mentor junior consultants, support technical delivery, and contribute to peer review and quality assurance - Work collaboratively with Kroll’s wider Cyber Risk teams, including incident response, threat intelligence, cloud security, and detection engineering What you’ll need to succeed - 5+ years in offensive cybersecurity, including experience delivering red team, purple team, adversary emulation, or assumed-breach engagements - Existing SC clearance, or the ability and willingness to obtain SC clearance - A relevant CREST red team certification aligned to CBEST-style delivery, such as CREST Certified Red Team Specialist, formerly CCSAS, or the ability to obtain this within the probation period - Strong experience with Windows enterprise environments, Active Directory exploitation, privilege escalation, and lateral movement - Experienced and comfortable with performing social engineering techniques in support of red team operations, including email and voice phishing - Experience operating command-and-control frameworks such as, Mythic, Cobalt Strike, or similar tooling in authorised client engagements - Experience developing, modifying, or extending offensive security tooling, scripts, or payloads - Working knowledge of at least one of C, C#, Python, PowerShell, and/or JavaScript, to support offensive security objectives - Practical understanding of evasion techniques, endpoint security controls, operational security, and detection-aware tradecraft - Strong understanding of networking and web protocols, including TCP/IP, DNS, HTTP, HTTPS, and authentication flows - Experience conducting reconnaissance, attack path development, and objective-based testing - Excellent written and verbal communication skills, with the ability to explain complex technical issues clearly to technical and non-technical audiences - The ability to manage risk during live client engagements and operate within agreed rules of engagement - Work remote, but have the ability to come into the office at either London, Leeds, or Birmingham, on occasion for team building or administration Nice to have - CREST Certified Red Team Specialist, OSEP, OSCE3, CRTO, CRTL, GPEN, GXPN, or equivalent experience - Experience delivering CBEST, STAR-FS, TIBER, DORA-aligned, TLPT, or regulated financial-sector red team engagements - Strong working knowledge of Microsoft Entra ID, Microsoft 365, and hybrid identity attack paths - Working knowledge of cloud platforms such as AWS, Azure, or GCP, including identity, privilege escalation, misconfiguration abuse, and cloud-native attack paths - Experience with exploit development, reverse engineering, malware analysis, or assembly-level debugging - Experience with macOS or Linux endpoint tradecraft - Experience with Kubernetes, Docker, CI/CD platforms, DevOps environments, or containerised workloads - Experience with physical security - Experience with employing modern AI tooling to support offensive engagements - Threat intelligence, detection engineering, or incident response experience - Experience writing blogs, presenting at industry events, publishing research, or contributing to offensive security tooling - Experience leading small teams or technical workstreams during complex offensive security engagements In order to be considered for a position, you must formally apply via careers.kroll.com. Kroll is committed to creating an inclusive work environment. We are proud to be an equal opportunity employer and will consider all qualified applicants regardless of gender, gender identity, race, religion, colour, nationality, ethnic origin, sexual orientation, marital status, veteran status, age, or disability.

Role Description Kroll’s Cyber Risk team works on over 2,000 cases a year, including some of the most complex and highest profile matters in the world. With experts based around the world, supported by ground-breaking technology, we help clients navigate complex and evolving cyber threats with clarity, confidence and control. A Customer Success Manager is the single accountable owner for each customer, bringing together Kroll’s MDR and Retainer capabilities into one coordinated customer experience, aligned to the customer’s risk priorities and business goals, delivering clear, tangible outcomes across the CDR portfolio. You act as a strategic account advisor, ensuring customers realise measurable outcomes from their cybersecurity investment, while driving renewals, expansion, and long-term partnership value. - Own a portfolio of customers across MDR and Retainer services - Define and execute Customer Success Plans aligned to customer objectives, risk posture, and business priorities - Ensure customers realise measurable value and ROI, not just service delivery - Act as the single point of accountability for customer experience across cyber services - Partner with Sales and Solution Architecture on renewal strategy, expansion opportunities, and account planning - Co-own renewals, retention, and expansion across assigned accounts with Sales, Solution Architects and Executive Sponsors - Support Net Revenue Retention (NRR) through upsell, cross-sell and service expansion - Identify and progress commercial opportunities in partnership with Sales - Orchestrate delivery across MDR operations and platform services - Lead Monthly, Quarterly and Executive Business Reviews (QBRs / EBRs) - Build relationships with senior economic and technical stakeholders - Proactively identify and manage churn risk, adoption gaps, and service dissatisfaction - Align and collaborate with capability leads and associated functions - Leverage platforms such as Salesforce and Monday.com to streamline workflows Qualifications - Proven experience in Customer Success, Account Management, or a customer-facing role within cybersecurity, managed services, or SaaS environments - Demonstrated ability to drive customer retention and growth outcomes - Strong stakeholder management across technical, operational, and executive audiences - Proven experience leading customer reviews (QBRs / EBRs) and managing strategic customer engagements - Ability to manage a portfolio of accounts, prioritising effectively based on customer value, risk, and commercial opportunity Requirements - Working understanding of MDR / SOC operations - Incident response and retainer services - Offensive Security (e.g. penetration testing, assessments) - Experience supporting or owning renewals, upsell and cross-sell opportunities - Comfortable engaging in commercial and value-based conversations Benefits - Kroll is committed to creating an inclusive work environment. - We are proud to be an equal opportunity employer and will consider all qualified applicants.

Role Description We are looking for bright, motivated, and inquisitive minds to join our Kroll Responder monitoring and response team who are experienced in and passionate about modern cyber threat hunting and active response. Our Associate Principals use leading endpoint detection and response tools to rapidly identify, investigate, and respond to threats and threat actors impacting systems and networks around the globe every day. - Perform ongoing threat hunting, analysis, containment, and remediation of threats identified through advanced endpoint detection and response (EDR), endpoint prevention (EPP), SIEM, and related security tools. - Collect and review relevant forensic artifacts to identify root cause and understand nature of threats. - Develop and communicate written and verbal threat reports associated with events to customers. - Assist in ongoing research, development, and testing of enhanced threat detection and response tools, techniques, and indicators. - Support incident engagement teams with active intrusion detection and response tasks. - Conduct threat research, forensic analysis, and basic malware analysis of threats. - Actively participate in related client meetings and teleconferences. - Assist clients with questions regarding threat detections, EDR tools, deployment, and maintenance. Qualifications - Bachelor’s degree or higher in Computer Science, Cyber Security, Computer Engineering, or similar technical degree. - Minimum 5 years’ experience in threat hunting, detection, and response or equivalent experience. - Ability to respond rapidly, multi-task, and communicate effectively both verbally and in writing with customers, team members, and engagement managers. - Highly motivated, tenacious, assertive problem solver with a desire to analyze root cause and reach effective conclusions to active intrusions and incidents on an ongoing basis both individually and as part of larger response teams. - Solid understanding of Windows operating system fundamentals, architecture (File System, registry, processes, binaries, DLL’s, etc.) and administration concepts. Similar understanding of MacOS and/or Linux a plus. - Prior experience actively using endpoint threat detection and response (EDR) products to investigate threats such as SentinelOne, Crowdstrike Falcon, VMWare Carbon Black, Microsoft Defender for Endpoint, Cortex XDR, Trend Micro XDR, or others. - Understanding of common threat actor techniques, malware behavior and persistence mechanisms. - Working knowledge of various scripting languages and tools (PowerShell, Python, VB, Yara). - Working knowledge of TCP/IP and related networking concepts. - Prior experience using Splunk or other SIEM solutions, intrusion detection solutions, or related security products. - Relevant cyber security certifications including CISSP, GCIA, GCIH, GCFA, GMON, or GREM a plus. - Excellent written and verbal communication skills. - Availability for occasional after-hours, weekends, and/or holiday work in response to active incidents. Requirements - In order to be considered for a position, you must formally apply via careers.kroll.com. Benefits - Kroll is committed to creating an inclusive work environment. - We are proud to be an equal opportunity employer and will consider all qualified applicants regardless of gender, gender identity, race, religion, color, nationality, ethnic origin, sexual orientation, marital status, veteran status, age or disability.

Role Description In a world of disruption and increasingly complex business challenges, our professionals bring truth into focus with the Kroll Lens. Our sharp analytical skills, paired with the latest technology, allow us to give our clients clarity—not just answers—in all areas of business. We value the diverse backgrounds and perspectives that enable us to think globally. As part of One team, One Kroll, you’ll contribute to a supportive and collaborative work environment that empowers you to excel. Kroll’s M&A Advisory service line is a leading middle-market M&A advisor. We advise public corporations, financial sponsors, family-owned businesses and other private companies in middle-market buy-side and sell-side M&A transactions globally, with regional teams situated in U.S., Canada, UK, Germany, Ireland, France, China, Brazil and India. Kroll has extensive experience in buy-side and sell-side engagements, capital raising, transaction advisory services and financial sponsor coverage. At Kroll, your work will help deliver clarity to our clients’ most complex governance, risk and transparency challenges. Apply now to join One team, One Kroll. - Work on a variety of transactions in all stages, from initial client pitches to transaction closings. - Communicates regulatory, financial information and complex strategic issues in a clear, concise and relevant manner to assist and guide decision-makers in corporate finance transactions. - Ability to market services both to internal partners and external clients, develop client networks, and support efforts in developing and executing sales and marketing strategies. - Ensure quality of client deliverables by having a strong attention to detail. - Mentor and develop Staff, Vice Presidents and Directors. - Individuals will be assigned a wide variety of projects and given as much responsibility as their experience and capabilities permit. Qualifications - Minimum 10 years’ experience at a middle market, reputable boutique or regional investment bank serving the middle market with demonstrable M&A execution experience. - Bachelor's, Master's or MBA degree. - Ability to generate new business through the cultivation of existing relationships as well as the development of new relationships by various efforts including cold calling. - Ability to cross-sell other firm services within Corporate Finance and our other business units of GRA, Cyber, VAS and Kroll Business Services. - Ability to make effective decisions by analyzing information and considering priorities. - Proficient in MS Office, including Excel, Word, and PowerPoint. - Demonstrated experience with managing of day to day aspects of client relationships and projects. - Demonstrated record of leadership and effective management in matrixed organizations. - Excellent written and verbal communication skills that help represent diverse communities. - Experience working with diverse teams. Requirements - In order to be considered for a position, you must formally apply via careers.kroll.com. - Kroll is committed to creating an inclusive work environment. - We are proud to be an equal opportunity employer and will consider all qualified applicants regardless of gender, gender identity, race, religion, color, nationality, ethnic origin, sexual orientation, marital status, veteran status, age or disability. Company Description

• Design and build organizational data infrastructure/architecture • Partner with business leaders and domain owners to translate strategic priorities into data architecture capabilities • Provide insights into the changing database/datalake storage and utilization requirements for the company and offer suggestions for solutions • Establish standards for data platforms, integrations, analytics, and AI enablement • Analyze database/datalake implementation methods to make sure they are in line with company policies and any external regulations that may apply • Assist with organizational decisions on data infrastructure and architecture on an ongoing basis and make decisions on data strategy • Act as a trusted advisor on how data architecture enables revenue, efficiency and risk reduction, and advise leadership on data investment decisions • Oversee the migration of data from legacy systems to new solutions • Apply architectural principles, product-specific guidelines, security standards, usability design standards, as appropriate • Influence decision-making across multiple stakeholders and guide engineering teams in resolving complex technical challenges • Drive expansion of analytics and AI services by embedding scalable design patterns into every engagement • Contribute thought leadership, reusable assets, and frameworks to scale across the Data & AI practice

• Define and own the product vision, roadmap, and backlog for enterprise data, analytics, or AI product areas. • Serve as the single point of accountability for product outcomes, delivery health, and user experience. • Define and communicate product goals, success metrics, and value drivers to stakeholders and delivery teams. • Ensure products operate with clear ownership, release discipline, and lifecycle management. • Act as the primary interface between the CDO and business, finance, and functional leaders for assigned domains. • Partner with stakeholders to prioritize demand, manage tradeoffs, and align delivery to business timelines. • Translate business needs into clear, actionable requirements. • Establish and maintain trusted relationships that enable fast decision‑making and alignment. • Own and maintain a prioritized, well‑defined backlog with clear acceptance criteria and readiness standards. • Work with Program Managers, Scrum Masters, and delivery teams to plan releases and manage dependencies. • Balance short‑term delivery needs with long‑term product health, scalability, and maintainability. • Surface risks, constraints, or scope trade‑offs early to enable leadership decisions. • Partner with Data Governance, Data Stewards, and Platform Owners to ensure: • Consistent KPI definitions and metric logic. • Data quality, lineage, and trust standards. • Alignment with enterprise data architecture and security policies. • Ensure products meet operational readiness standards prior to release and are supported post‑launch. • Drive product adoption by ensuring solutions are intuitive, reliable, and aligned to real user workflows. • Define and track usage, adoption, and value realization metrics. • Collect feedback and iterate to continuously improve product experience and impact. • Support leadership by providing a clear narrative on what is delivered, what value it creates, and what comes next.

• Design and build scalable organizational data infrastructure and Medallion architecture within a Lakehouse environment • Develop robust, fault-tolerant ETL/ELT applications for seamless data ingestion, transformation, and distribution to enable analytics, reporting, and AI workloads • Work with different stakeholders and teams to assist with data related technical solutions and support their data infrastructure needs • Explore and experiment with new use cases, frameworks, and tools to enhance AI capabilities, ensuring data integrity, quality, and reliability • Identify and implement infrastructure re-designs to improve scalability, optimize data delivery, and automate manual workflows • Collaborate with cross-functional teams to understand data requirements, create robust data models, and deliver actionable insights • Monitor, troubleshoot, and optimize jobs for performance, addressing data pipeline bottlenecks and ensuring cost efficiency

• Create proposals for prospective clients based on requirements of the services. • Create accurate price estimates for breach notification cases, based on population size and scope of services. • Create and customize contracts for both Cyber Risk and breach notification. • Create adjustments to contracts when scope changes and/or submit redlined contracts to senior leadership for approval when requested by prospect. Advise senior leadership of the specific issues prompting the red lines. • Participate in scoping calls to gather additional information regarding the needs of the client to customize the contracts accordingly. • Determine what breach services will work for clients’ needs/situation. • Determine appropriate pricing strategy based on level of services. • Submit and/or perform conflict checks after new prospects are scoped. Ensure conflicts are cleared prior to contracts sent. • Ensure all paperwork is fully executed prior to engagement, as well as all relevant information aggregated for billing purposes. • Manage internal processes to kick off and execute against engagements once won. This includes, but is not limited to, ensuring all internal stakeholders are aware of next steps as well as setting up kick-off calls with the client. • Maintain current contract templates for use by inside sales and other sales stakeholders. • Setting appropriate expectations with new clients on initial next steps. Ensure prospect/client questions are responded to in a timely manner – whether answered directly or internal stakeholder introduced. • Ensure quality and accurate sales tracking through CRM. • Individual will be on call a minimum of one time per month.

Title: Senior Manager, Cloud Security, Cyber & Data Resilence Location: United States Department: Cybersecurity Job Description: Description Kroll is seeking a Senior Manager and leader, for our Cloud Security discipline within the Cyber, Data, and Resilience practice, responsible for architecting, engineering, and implementing secure cloud solutions across Azure, AWS, and hybrid environments. This role combines strategic architecture design with hands-on engineering and implementation to advance security maturity within client cloud environments. You will work alongside accomplished senior staff, enhancing your expertise, while mentoring team members and delivering excellence. You will be part of an award-winning and respected team supporting a global network of clients and colleagues. RESPONSIBILITIES: Leadership & Strategy - Lead and develop the cloud security practice, including team development, capability building, and solution innovation - Define cloud security architecture standards, reference architectures, and engineering best practices - Develop and maintain cloud security maturity frameworks for client assessment and continuous improvement - Collaborate with partners (Microsoft Azure, AWS, CrowdStrike) to co-develop solutions and stay current on platform capabilities - Drive thought leadership through publications, presentations, and industry engagement Architecture & Engineering - Design comprehensive cloud security architecture for Azure, AWS, and hybrid/multi-cloud environments - Engineer secure cloud foundations including identity management, network segmentation, workload protection, and data security - Develop Infrastructure as Code (IaC) templates and automation for repeatable, secure cloud deployments - Create reference architectures for cloud-native security, container security, and serverless architectures - Design cloud security monitoring, logging, and incident response architectures Client Engagement & Delivery - Lead complex cloud security engagements from discovery through deployment and maturity advancement - Conduct cloud security posture assessments and gap analyses against industry frameworks - Develop cloud security roadmaps aligned with business objectives and risk appetite - Provide executive-level guidance on cloud security strategy and investment priorities - Oversee implementation teams to ensure architecture vision is properly executed - Support the development of proposals and statements of work for Kroll clients Continuous Improvement & Innovation - Build client maturity programs that advance cloud security capabilities over time - Identify and implement emerging cloud security technologies and practices - Optimize existing cloud security architectures for performance, cost, and security effectiveness - Mentor team members on cloud security architecture and engineering practices REQUIREMENTS: Experience - 8+ years in information security with 5+ years focused on cloud security architecture and engineering - Proven track record designing and implementing enterprise-scale cloud security solutions - Experience leading cloud security practices or teams - Demonstrated expertise in at least two major cloud platforms (Azure, AWS, GCP) - Strong background in security engineering and hands-on implementation Technical Skills - Deep expertise in Azure and AWS security services (IAM, networking, compute security, data protection) - Strong understanding of cloud-native security architecture patterns and Zero Trust principles - Proficiency with Infrastructure as Code (Terraform, ARM templates, CloudFormation) - Experience with container security (Kubernetes, Docker) and serverless security - Knowledge of cloud security frameworks (CSA CCM, CIS Benchmarks, Azure/AWS Well-Architected) - Familiarity with cloud security posture management (CSPM) and cloud workload protection (CWPP) tools Certifications (Preferred) - Microsoft Certified: Azure Security Engineer Expert or Azure Solutions Architect Expert - AWS Certified Security - Specialty - CISSP, CCSP, or equivalent security certifications Essential Traits - Excellent communication skills with ability to engage both technical teams and executives - Strong leadership and mentoring capabilities - Ability to balance strategic thinking with hands-on technical delivery - Client-focused with strong relationship management skills - Passion for continuous learning and staying ahead of cloud security threats Success Metrics - Cloud security practice revenue growth and client satisfaction - Development and deployment of reusable cloud security reference architectures - Team capability development and certification attainment - Client maturity advancement across cloud security programs - Thought leadership contributions (publications, speaking engagements) Your recruiter will be happy to walk you through your U.S.-specific benefits, which include: - Healthcare Coverage: Comprehensive medical, dental, and vision plans. - Time Off and Leave Policies: Generous paid time off (PTO), paid company holidays, generous parental and family leave. - Protective Insurances: Life insurance, short- and long-term disability coverage, and accident protection. - Compensation and Rewards: Competitive salary structures, performance-based incentives, and merit-based compensation reviews. - Retirement Plans: 401(k) plans with company matching. Please note that benefits may vary by region, department and role. We encourage you to speak with your recruiter to learn more about the specific benefits available for your position. About Kroll Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore and maximize our clients’ value? Your journey begins with Kroll. We are proud to be an equal opportunity employer and will consider all qualified applicants regardless of gender, gender identity, race, religion, color, nationality, ethnic origin, sexual orientation, marital status, veteran status, age or disability. The current salary range for this position is $150,000 to $200,000 #LI-CN1 #LI-Remote