You will lead detection and response and security-operations functions, including engineers and analysts. You will set strategy, roadmaps, staffing, and incident-response posture. You will oversee vulnerability management, detection tooling, metrics, and executive reporting across cloud, enterprise, and vehicle environments while guiding high-stakes technical decisions and incidents.
Responsibilities
- Lead detection and response and security operations teams
- Own 24x7 staffing, on-call rotations, and resource allocation across time zones
- Define and drive strategy and roadmaps for detection engineering, threat hunting, incident response, and security operations
- Guide technical architecture, prioritization, and high-stakes incident response
- Own incident-response posture from detection through post-incident reviews
- Oversee cloud vulnerability management and remediation tracking
- Oversee detection tooling and cross-functional security projects
- Report KPIs, telemetry coverage, alert fidelity, and security-operations maturity to executive leadership
Requirements
- 15+ years of progressive cybersecurity experience
- 6+ years leading, managing, and scaling detection engineering and security operations teams
- Hands-on experience with detection engineering, threat hunting, or incident response
- Knowledge of SIEM, EDR, NDR, SOAR, and detection and response tooling
- Knowledge of AWS, Kubernetes, Linux, macOS, and Windows security
- Knowledge of MITRE ATT&CK, NIST CSF, and adversarial techniques
- Incident management and vulnerability-management experience
- Python and/or C++ proficiency
- Experience with AWS Athena, Snowflake, SQL, and data warehousing
- Experience designing and implementing Zero Trust Architecture
- Experience with auditd, sysmon, or eBPF
- Knowledge of distributed systems, microservices, performance monitoring, and capacity planning
- Experience with DevSecOps, CI/CD, Git, and Terraform
Benefits
- Annual bonus
- Equity compensation