About the Role
You will lead cross-functional initiatives that improve detection infrastructure, telemetry collection, log normalization, and detection-as-code pipelines. You will design and tune cloud, identity, endpoint, SaaS, and CI/CD detections; conduct threat hunting; respond to incidents; and mentor SOC engineers.
Requirements
•10+ years of security experience
•Experience leading cross-functional security projects or programs
•Threat detection and incident response expertise
•Cloud security expertise
•Experience with SIEM or security data lake pipelines, log onboarding, normalization, and detection-as-code workflows
•EDR and SaaS security monitoring expertise
•Experience authoring and maintaining detections
•Incident management experience
•Knowledge of MITRE ATT&CK, adversarial techniques, and NIST CSF
•Ability to write testable Python code
Responsibilities
•Lead cross-functional detection infrastructure projects
•Expand detection coverage across cloud and corporate environments
•Design, build, and tune security detections
•Embed logging and detection requirements into system designs
•Integrate threat intelligence and adversary emulation into coverage priorities
•Conduct proactive threat hunting
•Respond to cloud and enterprise security incidents
•Participate in an on-call rotation
•Mentor SOC engineers
•Contribute to detection planning
Benefits
•Annual bonus
•Equity compensation
•Benefits
