Requirements

10+ years of experience in Security Incident Response and Detection & Response Engineering in large, regulated organizations
Technical and process expertise in Security Operations and Incident Response services
Experience delivering incident and program status updates to leadership
Proven ability to lead and manage complex cross-functional programs
Experience responding to external and insider threats
Skill in analyzing network and host-based security events
Knowledge of networking technologies, including TCP/IP and related protocols
Understanding of operating systems, file systems, and memory structures on Windows, MacOS, and Linux
Coding or scripting experience in one or more general purpose languages
Familiarity with attacker tactics, techniques, and procedures

Nice to Haves

Broad security domain knowledge with specialized expertise in areas such as logs and events processing, incident management, digital forensics, detection, or response tool development
Background in malware analysis, digital forensics, intrusion detection, or threat intelligence
Experience recruiting, building, and leading technical teams, including performance management
Experience implementing responsible, ethical AI practices including risk assessment, bias mitigation, and quality reviews
Demonstrated ongoing AI skill development such as prompt/context engineering and agent orchestration
Experience in threat hunting using intelligence data to proactively identify and investigate suspicious network and system behavior
Ability to integrate AI tools to optimize workflows, delivering measurable improvements in efficiency and quality

Conduct security investigations and lead incident response efforts across multiple teams, driving resolution
Develop initiatives to improve incident response effectiveness and remediation capabilities
Refine operational metrics, KPIs, and service level objectives to measure Security Operations and Incident Response services
Influence and align team vision and strategy; prioritize and deliver multi-year roadmaps and projects
Build and maintain strong relationships with internal stakeholders to facilitate impactful solutions
Partner with cross-functional teams to address challenges in detection and response initiatives
Collaborate with software and production engineering teams to create scalable, flexible response and investigative solutions
Prioritize automation and scaling of detection and response capabilities
Coach and mentor team members to support professional growth and career development