Head of Detection and Response
Core
Senior security engineering leader accountable for global incident detection, response, threat intelligence, and security operations programs in cloud-first environments.
Role type
Senior IC security operations leader (Head of Detection & Response)
Builds
Global detection and response strategy, roadmap, and investment plan for cloud-native security operations
Domain
Cybersecurity, Cloud Security, Threat Intelligence, Incident Response
Deliverable
production ML models
Required skills
Cloud-native detection engineering, Threat intelligence fusion, Incident response leadership, Automation (SOAR), ML/LLM-assisted detection, Executive communication, Governance and OKR setting, Purple teaming, SaaS telemetry integration
Preferred skills
Board-level communication experience, Privacy-by-design expertise, Secure AI usage frameworks
Technologies
SOAR, ML/LLM, Telemetry, Rule engines, ATT&CK, Diamond model
Responsibilities
Own global detection and response strategy and roadmap; Lead multi-layer organization across time zones; Scale cloud-native detections across identity, data, endpoints, CI/CD, containers, and SaaS; Operate 24x7 incident response function with automation and playbooks; Build threat intelligence fusion capability and run hypothesis-driven threat hunting; Partner with Trust Engineering to evolve security data platform; Align with Product Security and Governance/Risk to close systemic risks
Seniority
Senior, hands-on IC with leadership responsibilities
