Responsible for leading the design, development, and continuous optimization of enterprise-wide threat detection capabilities across Cybersecurity Fusion Operations
Drive threat detection, use-case development, telemetry integration, and adversary-focused detection strategies to rapidly identify, triage, and enable response to cyber threats
Oversee the build and tune detections across SIEM, EDR, Cloud, Identity, DLP and other security platforms
Translate threat intelligence into actionable detection logic
Partner with SOC, IR, Insider Threat, Fraud, and Physical Security teams
Build reporting for executive leadership and regulators (FFIEC, OCC, etc.)
Lead and develop a team of detection engineers and analysts
Requirements
5–10+ years in cybersecurity with deep experience in detection engineering or SOC operations
4+ years of experience in Information Security
2+ years of experience with threat detection and response platforms
2+ years of experience in a Leadership Role
Associate's Degree or 4+ years of equivalent experience
Strong expertise in threat hunting
SIEM
EDR/XDR platforms (CrowdStrike, Defender, etc.)
MITRE ATT&CK framework
Strong understanding of attacker TTPs, intrusion kill chain, and threat modeling
Experience in Cyber Fusion Center operating model
Hands-on experience with threat detection, purple teaming / adversary simulation