Director - CrowdStrike AIDR Architect

At Kroll, we provide reactive, advisory, transformation, and managed security services to support clients at every stage of their path toward cyber and data resilience maturity. Our experts bring decades of experience in cyber risk consultancy, helping organizations across the world simplify and reduce the complexity of implementing, transforming, and managing their cyber programs.

As organizations rapidly adopt generative AI, agentic AI systems, AI copilots, and custom AI applications, the attack surface is evolving beyond traditional infrastructure, identity, and application security. Kroll is building the next generation of AI security services to help clients secure AI systems, protect sensitive data, govern AI usage, and defend against emerging adversarial AI threats.

We are seeking a Director, AI Security Architecture to lead the design, delivery, and growth of Kroll’s AI security architecture and engineering practice.

The Director, AI Security Architecture is responsible for building and leading Kroll’s AI Security Architecture capability, helping organizations securely adopt generative AI, agentic AI, and AI-powered applications at enterprise scale.

This role combines executive advisory, security architecture, practice leadership, and hands-on technical delivery. The Director will lead a team of architects and consultants responsible for designing, deploying, integrating, and operationalizing AI security technologies, with particular focus on CrowdStrike Falcon AI Detection and Response (AIDR), AI application security, AI governance controls, agent security, AI runtime protection, and AI-enabled security operations.

This is not a purely managerial role. The Director will remain deeply involved in architecture design, technical solution development, client delivery, and emerging AI security research while leading a growing team of specialists.

The Director will partner closely with CrowdStrike, hyperscale cloud providers, AI platform vendors, and Kroll’s Cloud Security, Identity, Data Protection, Security Operations, Incident Response, and Managed Security teams to build market-leading AI security services.

This role reports into Cyber and Data Resilience leadership and serves as one of Kroll’s senior AI security subject matter experts.

What You’ll Do

Lead AI Security Architecture Engagements

• Serve as the lead architect for enterprise AI security transformation programs.

• Design secure architectures for enterprise AI ecosystems including:

  • Workforce AI platforms

  • Custom AI applications

  • Agentic AI systems

  • Retrieval-Augmented Generation (RAG) environments

  • AI copilots

  • Multi-agent architectures

  • AI gateways and model routing platforms

• Develop reference architectures for securing:

  • Large Language Models (LLMs)

  • AI agents

  • Model Context Protocol (MCP) environments

  • Vector databases

  • AI APIs

  • AI development pipelines

• Conduct architecture reviews and security assessments for AI-enabled business initiatives.

• Advise CISOs, CIOs, CTOs, Chief AI Officers, and AI engineering teams on secure AI adoption strategies.

Lead AI Security Engineering and Deployment

• Provide architectural oversight for Falcon AIDR deployments across enterprise environments.

• Guide implementation teams deploying:

  • Falcon AIDR

  • Falcon Cloud Security

  • Falcon Data Protection

  • Falcon Identity Protection

  • Falcon Next-Gen SIEM

  • Falcon Fusion SOAR

• Design enterprise-scale deployment strategies across:

  • Browser instrumentation

  • SDK integrations

  • AI gateways

  • MCP proxies

  • Cloud-native AI workloads

  • Kubernetes environments

• Lead complex integrations between AI security platforms and existing enterprise security ecosystems.

Build AI Detection and Response Capabilities

• Design detection strategies for adversarial AI threats, including:

  • Prompt injection

  • Indirect prompt injection

  • Jailbreak attacks

  • Agent abuse

  • Tool misuse

  • Model manipulation

  • Sensitive data leakage

  • AI-assisted insider threats

• Establish AI detection engineering standards aligned with MITRE ATLAS.

• Lead development of AI-focused:

  • Detection content

  • Correlation logic

  • SOAR playbooks

  • Response workflows

  • Security analytics

• Drive integration of AI telemetry into modern security operations centers.

Build and Lead the Practice

• Recruit, mentor, and develop a team of AI security architects, engineers, and consultants.

• Establish delivery methodologies, architecture standards, and technical quality controls.

• Create reusable:

  • Reference architectures

  • Deployment accelerators

  • Integration frameworks

  • Detection libraries

  • AI security assessment methodologies

• Define service offerings, go-to-market strategies, and practice growth initiatives.

• Support revenue forecasting, pipeline development, and practice performance management.

Executive Advisory and Client Leadership

• Serve as a trusted advisor to executive stakeholders.

• Lead workshops with security, technology, risk, compliance, and AI leadership teams.

• Translate complex AI security risks into business-focused recommendations.

• Present architecture recommendations and transformation roadmaps to executive audiences.

• Support strategic AI security assessments, maturity reviews, and board-level discussions.

Partner and Market Leadership

• Act as a senior technical liaison with CrowdStrike and other strategic technology partners.

• Support pre-sales activities including:

  • Opportunity qualification

  • Architecture workshops

  • Solution design

  • Statement of work development

  • Executive presentations

• Represent Kroll at industry conferences, partner events, webinars, and thought leadership initiatives.

• Contribute to the evolution of Kroll’s AI security strategy and market positioning.

Hiring Requirements

Required Experience

• 10+ years of cybersecurity consulting, architecture, engineering, or security transformation experience.

• 5+ years leading technical teams, security architecture programs, or consulting practices.

• Demonstrated experience serving as lead architect on large-scale enterprise security transformations.

• Deep expertise across multiple cybersecurity domains, including:

  • Cloud security

  • Identity security

  • Data protection

  • Security operations

  • Application security

  • Detection and response

• Significant experience with the CrowdStrike Falcon platform, including one or more of:

  • Falcon Insight

  • Falcon Cloud Security

  • Falcon Identity Protection

  • Falcon Data Protection

  • Falcon Next-Gen SIEM

  • Falcon Fusion SOAR

  • Falcon AIDR

• Experience designing and implementing enterprise security architectures rather than solely operating security tools.

• Experience leading consulting engagements and executive stakeholder relationships.

AI Security Experience

• Strong understanding of enterprise AI architectures, including:

  • OpenAI

  • Anthropic Claude

  • Google Gemini

  • AWS Bedrock

  • Azure OpenAI

  • Open-weight model ecosystems

• Experience securing AI-enabled applications and agent frameworks including:

  • LangChain

  • LlamaIndex

  • AutoGen

  • CrewAI

  • AWS Bedrock Agents

  • Microsoft Copilot Studio

• Strong understanding of:

  • Prompt injection

  • Jailbreak attacks

  • Agent security

  • MCP security

  • RAG security

  • Model abuse

  • Sensitive data exposure risks

• Familiarity with MITRE ATLAS and emerging AI threat frameworks.

Technical Skills

• Strong scripting and automation skills including Python.

• Experience with one or more of:

  • CrowdStrike Query Language (CQL)

  • KQL

  • SPL

  • Sigma

• Experience designing SOAR and security automation solutions.

• Experience integrating security telemetry into SIEM platforms and enterprise detection ecosystems.

Education

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, Information Systems, or a related field, or equivalent professional experience.

Preferred Qualifications

• Direct Falcon AIDR deployment, architecture, or engineering experience.

• CrowdStrike Certified Cloud Specialist (CCCS).

• Additional CrowdStrike certifications including CCFA, CCFR, CCSA, CCSE, or CCIS.

• Experience building AI security programs at enterprise scale.

• Experience designing secure AI governance and AI risk management frameworks.

• Experience deploying AI security controls in highly regulated industries.

• Experience with AI gateway technologies and model security platforms.

• Experience leading practices or service lines within a consulting organization.

• Industry thought leadership through publications, conference speaking, or community contributions

• Healthcare Coverage: Comprehensive medical, dental, and vision plans.

• Time Off and Leave Policies: Generous paid time off (PTO), paid company holidays, generous parental and family leave.

• Protective Insurances: Life insurance, short- and long-term disability coverage, and accident protection.

• Compensation and Rewards: Competitive salary structures, performance-based incentives, and merit-based compensation reviews.

• Retirement Plans: 401(k) plans with company matching.

Please note that benefits may vary by region, department and role. We encourage you to speak with your recruiter to learn more about the specific benefits available for your position.

About Kroll

Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore and maximize our clients’ value? Your journey begins with Kroll.

We are proud to be an equal opportunity employer and will consider all qualified applicants regardless of gender, gender identity, race, religion, color, nationality, ethnic origin, sexual orientation, marital status, veteran status, age or disability.

The current salary range for this position is $200,000 to $250,000

#LI-CN1

#LI-Remote