Senior Manager, Cyber Threat Detection & Response
Core
Designing, writing, and tuning detection/SIEM/XDR rules, responding to security alerts and incidents, and maintaining security posture across cloud, network, and endpoint environments.
Role type
Senior Manager, Cyber Threat Detection & Response (Blue Team)
Builds
Detection rules, automated response workflows, incident response playbooks, and security dashboards
Domain
Cybersecurity, Cloud Security, Network Security
Required skills
SIEM/XDR administration, log analysis and event correlation, incident response, threat hunting, vulnerability assessment, cloud security (AWS/Azure), IAM, firewall/IDS/IPS configuration, scripting (Python/PowerShell/Bash), security automation (SOAR), risk-based tuning
Preferred skills
Multi-cloud security, SOAR platforms, CISSP/CISM/CEH certifications, compliance and regulatory standards knowledge
Technologies
SIEM, XDR, IDS/IPS, NDR, Firewalls, Endpoint Protection, AWS, Azure, Python, PowerShell, Bash, SOAR
Responsibilities
Configure and manage security tooling (SIEM/XDR, log management, IDS/IPS, firewalls, endpoint protection, cloud tools); Triage and investigate alerts via log analysis and event correlation; Perform vulnerability assessments, threat hunting, and risk-based tuning of detection rules; Participate in incident response (containment, mitigation, root-cause analysis, remediation); Automate security operations using scripts and workflows; Collaborate with IT/DevOps to embed security best practices; Maintain security policies, access controls, and compliance frameworks; Produce documentation, dashboards, and run-books
Seniority
Senior Manager, hands-on IC with leadership responsibilities
