Senior Manager - CrowdStrike AIDR Engineer
Kroll · United States · 3 wk ago
RemoteRemoteEngineering$150k–$200k/yrFull-time
About the role
Kroll is seeking a Manager or Senior Manager to lead the CrowdStrike Falcon AI Detection and Response (AIDR) deployment practice. This role involves deploying, configuring, integrating, and tuning Falcon AIDR within client tenants, ensuring seamless integration with the Falcon stack.
Responsibilities
- Deploy Stand up Falcon AIDR in client tenants — provisioning, sensor configuration, console setup, and verification of telemetry flow.
- Roll out the browser extension for workforce AI visibility and policy enforcement on employee GenAI usage.
- Deploy the MCP proxy to instrument Model Context Protocol traffic for agent security.
-
Requirements
- 4+ years (Manager) or 6+ years (Senior Manager) of hands-on experience deploying, configuring, and integrating security tooling in enterprise environments — with a meaningful concentration in the CrowdStrike Falcon platform.
- Direct hands-on with CrowdStrike Falcon platforms, including at least one of Falcon Insight (EDR), Falcon Cloud Security, Falcon Identity Protection, Falcon Next-Gen SIEM / LogScale, or Falcon Data Protection.
- Experience deploying, configuring, and integrating Falcon platform modules — not just operating them post-deployment.
- Working knowledge of modern AI/agent stacks sufficient to deploy and configure AIDR against them: LLMs (OpenAI, Anthropic Claude, Google Gemini, open-weights models), agent frameworks (LangChain, LlamaIndex, AutoGen, AWS Bedrock Agents, Microsoft Copilot Studio), MCP (Model Context Protocol), AI/API gateways, RAG architectures.
- Experience building Fusion SOAR playbooks, Charlotte AI workflows, or equivalent SOAR/automation content on the Falcon platform.
- Experience integrating Falcon modules with Next-Gen SIEM / LogScale including custom correlation, dashboards, and case management.
- Prior consulting delivery experience — scoping, leading, and personally executing deployment engagements for external clients.
- Bachelor’s degree in a relevant field or equivalent professional experience.
Qualifications
- Direct hands-on Falcon AIDR deployment, configuration, or integration experience.
- CrowdStrike Certified Cloud Specialist (CCCS) — strongly preferred.
- Experience deploying and tuning Falcon Next-Gen SIEM / LogScale content (parsers, correlation rules, dashboards, case management).
- Experience building production Falcon Fusion SOAR playbooks at scale.
- Experience building Charlotte AI prompts and agentic workflows.
- Experience deploying Falcon Cloud Security in Kubernetes / containerized AI workload environments.
- Hands-on experience instrumenting AI applications and agents at the SDK level (LangChain, LlamaIndex, AutoGen, AWS Bedrock Agents).
- Hands-on experience with MCP (Model Context Protocol) server deployment and instrumentation.
- Experience with AI gateway architectures — AWS Bedrock Guardrails, Azure AI Content Safety, NVIDIA NeMo Guardrails — for the purpose of integration or migration to AIDR.
- Prior consulting experience at a tier-1 firm with a CrowdStrike-focused delivery practice (Big 4 CrowdStrike teams, CrowdStrike Services, or equivalent).