Huntress is a remote-first cybersecurity company founded by former NSA cyber operators, focused on making enterprise-grade cybersecurity accessible to businesses. The role of Manager, Detection Engineering & Threat Hunting is responsible for defining the strategy and technical roadmap for detection engineering, leading a team to enhance detection capabilities and reduce false positives.
Responsibilities:
- Design, implement, and uphold internal processes to reduce latency and facilitate detection engineering work-products for data-constrained environments
- Meet with detection engineers in a 1:1 setting weekly to socialize, focus initiatives, gather feedback, and provide feedback, and enable analysts to progress rapidly in their careers
- Work with the Product and Engineering organizations to prioritize the creation of new capabilities with the goal of producing highly reliable detections
- Engage with our Support organization to create streamlined workflows for partner/constituent requests for detection engineering support, not limited to responding to false positives and developing new detections
- Provide technical leadership for detection engineers with multidisciplinary expertise
- Ensure team members fully understand the goals and objectives of Huntress’ mission and how their work fits into the bigger picture
- Provide key input and guidance to company stakeholders such as Marketing, the SOC, Support, and Product
- Develop, track, and report on Objectives and Key Results linked to the Detection Engineering focus initiatives
- Develop detection opportunities for new technologies and services that Huntress brings to market
- Participate in public speaking engagements in both webinar and in-person formats
Requirements:
- Experience in leading cybersecurity teams with diverse skills and backgrounds in one or more of the following areas: Security Operations, Digital Forensics, Incident Response, Malware Analysis, Threat Hunting, or Detection Engineering
- 4+ years of experience in detection engineering or a related specialty (e.g., threat hunting, adversary emulation)
- 2+ years of experience managing or leading a detection engineering, threat hunting, or security research team
- Actively engaged in the information security community by attending conferences or contributing to conversations/projects in the public domain
- Continually learning and staying up to date on the latest threat actor tradecraft, detection techniques, and security operations concepts
- Ability to identify workflows being performed and create detailed process diagrams and operating procedures
- Effective communicator of highly technical concepts to stakeholders of varying technical backgrounds
- Experience using platforms such as Elasticsearch or Data Dog to analyze and review data at scale
- Demonstrated experience leading initiatives or projects that required delegation and accountability to achieve success
- Data-driven approach with experience in Data Science concepts or statistical analyses