Cyber Threat Detection & Response Team Lead
New
C
Control RisksCybersecurity
RemoteFull-TimeLead
Salary160,000 - 185,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- 10+ years of progressive experience in cybersecurity; 3+ years in a leadership role
Requirements
- 10+ years of progressive experience in cybersecurity, with depth in incident response, detection engineering, SOC operations, or cyber defense.
- 3+ years in a leadership role managing or building a detection and response, SOC, or incident response team.
- Deep, hands-on knowledge of incident response, digital forensics, malware analysis, and threat hunting methodologies.
- Hands-on experience with detection and response technologies including SIEM (e.g., Splunk, Microsoft Sentinel), SOAR, EDR/XDR, NDR, IDS/IPS, and log management platforms.
- Strong understanding of the MITRE ATT&CK framework and NIST Cybersecurity Framework.
- Proven experience partnering with Security Engineering teams to develop detection logic and automate workflows.
- Ability to translate technical exploit chains and risks into business-impact narratives for executive leadership.
- Experience building operational processes, escalation frameworks, and playbooks from the ground up.
- Strong understanding of cloud security (AWS, Azure, GCP) and modern enterprise environments.
- Familiarity with threat intelligence platforms (e.g., Recorded Future, OpenCTI, MISP).
- Understanding of legal and regulatory frameworks around SOC and incident response.
- Relevant certifications: CISSP, CISM, GIAC (GCIH, GCFA, GCIA, GSOM), or equivalent.
Responsibilities
- Build, manage, and scale a Cyber Detection and Response Team (DART) from the ground up.
- Define and implement the DART's operational model, escalation paths, and on-call rotations.
- Develop Standard Operating Procedures (SOPs) and incident response playbooks aligned to MITRE ATT&CK.
- Serve as Incident Commander for critical cyber security incidents.
- Lead proactive threat hunting operations to identify adversary activity.
- Integrate threat intelligence into DART workflows to inform prevention strategies.
- Conduct team coaching, performance reviews, and support career development.
- Serve as liaison between team members and program management.
View Full Description & ApplyYou'll be redirected to the employer's site
