Head of Detection Engineering - VP
Core
Lead the global detection engineering strategy and capabilities to detect adverse cybersecurity events within the Continuous Security Monitoring program.
Role type
VP-level Head of Detection Engineering
Builds
Global detection engineering strategy, logging and monitoring standards, and detection rules across the IT environment
Domain
Cybersecurity, Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR)
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
Strategic planning, team leadership, SIEM/EDR platform expertise, adversary tactics knowledge, network and infrastructure architecture, data engineering, anomaly and behavior analytics, statistics, probability, social threat detection mechanisms
Preferred skills
Leading teams of 10+, publishing cybersecurity research, theoretical approach to detection, AI/ML and large language models for detection
Technologies
SIEM, EDR, networks, infrastructure, computing, identity and access management (IAM), data engineering, relevant software languages, telemetry
Responsibilities
Own the development of the global detection engineering strategy, ensure logging and monitoring standards align to requirements, govern the development and performance monitoring of Detection Rules, serve as the approval authority for changes to Detection capabilities, influence the design and implementation of Continuous Security Monitoring, govern detection engineering projects, ensure detailed documentation and provide evidence to risk management and audit
Seniority
VP, strategic leadership and team management