Skip to content
NEXTMOVEFDE careers · United States
Kroll

Senior Manager, CrowdStrike AI Engineer

AI summary of the role

Kroll is hiring a player-coach Manager/Senior Manager to build and lead its CrowdStrike Falcon AIDR deployment practice, personally delivering end-to-end deployment, configuration, integration, and tuning of Falcon AIDR in client tenants.

What you’ll do

  • Stand up Falcon AIDR in client tenants, including provisioning, sensor configuration, console setup, and telemetry verification.
  • Deploy browser extensions, integrate AIDR SDK into client AI apps/agents, deploy MCP proxy, and configure AI/API gateway integrations.
  • Configure prompt-attack and sensitive-data protection policies, tuning for direct/indirect prompt injection, jailbreaks, multi-modal attacks, and unsafe content.
  • Integrate AIDR telemetry into Falcon Next-Gen SIEM (LogScale), build Fusion SOAR playbooks, and integrate with Falcon Cloud Security, Data Protection, and Identity Protection.

What you’ll bring

  • 4+ years (Manager) or 6+ years (Senior Manager) hands-on experience deploying, configuring, and integrating security tooling in enterprise environments, with meaningful concentration in CrowdStrike Falcon platform.
  • Hands-on deployment experience with at least one Falcon module (Insight/EDR, Cloud Security, Identity Protection, Next-Gen SIEM/LogScale, or Data Protection).
  • Working knowledge of modern AI/agent stacks: LLMs (OpenAI, Anthropic, Google Gemini), agent frameworks (LangChain, LlamaIndex, AutoGen, AWS Bedrock Agents, Microsoft Copilot Studio), MCP, AI/API gateways, RAG.
  • Working understanding of prompt-injection and jailbreak tradecraft (direct/indirect, jailbreaks, multi-modal, MCP abuse) referenced via MITRE ATLAS.

Technologies

CrowdStrike Falcon · Falcon AIDR · Falcon Next-Gen SIEM · LogScale · Falcon Fusion SOAR · Falcon Cloud Security · Falcon Data Protection · Falcon Identity Protection · LangChain · LlamaIndex · AutoGen · AWS Bedrock Agents

Source and classification

Implementation & delivery · Evidence for this classification:

At Kroll, we provide reactive, advisory, transformation, and managed security services to support clients at every stage of their path toward cyber and data resilience maturity. Our experts bring decades of experience in cyber risk consultancy, helping organizations across the world simplify and reduce the complexity of implementing, transforming, and managing their cyber programs. Through our strategic multi-year partnership with CrowdStrike, we combine world-class investigative expertise with an AI-native platform to redefine the future of managed detection and response, delivering faster outcomes, stronger protection, and greater resilience for organizations worldwide. The Cyber & Data Resilience capability (formerly Engineered Defense) is hiring a Manager or Senior Manager to build and lead Kroll's CrowdStrike Falcon AI Detection and Response (AIDR) deployment practice. With the GA
More from the job description

At Kroll, we provide reactive, advisory, transformation, and managed security services to support clients at every stage of their path toward cyber and data resilience maturity. Our experts bring decades of experience in cyber risk consultancy, helping organizations across the world simplify and reduce the complexity of implementing, transforming, and managing their cyber programs. Through our strategic multi-year partnership with CrowdStrike, we combine world-class investigative expertise with an AI-native platform to redefine the future of managed detection and response, delivering faster outcomes, stronger protection, and greater resilience for organizations worldwide. The Cyber & Data Resilience capability (formerly Engineered Defense) is hiring a Manager or Senior Manager to build and lead Kroll's CrowdStrike Falcon AI Detection and Response (AIDR) deployment practice. With the GA of Falcon AIDR, CrowdStrike extended the Falcon platform to secure the AI prompt and agent interaction layer — protecting workforce GenAI use and homegrown AI applications and agents through one sensor and one console, with deployment via browser extension, application SDK, AI/API gateway integration, and MCP proxy. Kroll clients need a partner who can deploy, configure, integrate, and tune Falcon AIDR end-to-end inside their Falcon tenant — getting AIDR turned on across the right deployment su [... source excerpt omitted ...] IEM, building Fusion SOAR playbooks for AI events, integrating with Falcon Cloud Security and Falcon Data Protection, and tuning prompt-attack and data-protection policies to each client's AI usage patterns. This is a player-coach role. The “Manager” or “Senior Manager” title does not mean hands-off oversight. You will personally lead engagement delivery — standing up AIDR in client tenants, integrating it with the rest of the Falcon stack, configuring policies, and tuning detections — while mentoring junior consultants and partnering with CrowdStrike account teams on scoping. This role reports into the Engineered Defense / Tech Transformation leadership team and partners clo [... source excerpt omitted ...] setup, and verification of telemetry flow. Roll out the browser extension for workforce AI visibility and policy enforcement on employee GenAI usage. Integrate the AIDR SDK into client AI applications and agents (LangChain, LlamaIndex, AutoGen, AWS Bedrock Agents, Microsoft Copilot Studio, custom-built agent frameworks). Deploy the MCP proxy to instrument Model Context Protocol traffic for agent security. Configure AI/API gateway integrations for inline prompt inspection and response. Enable AIDR coverage of AI workloads in Kubernetes through Falcon Cloud Security, including runtime detection at the prompt layer with no proxies or architectural changes. Configure Configu

How jobs are selected

Employer postings · Data from · Sources