Senior Manager, Detection Response
$270,000–$290,000 year
HybridSan Francisco, California, United States
Job Summary
Lead incident response and security operations as the senior escalation point and incident commander during active investigations. Build and mature detection engineering across cloud, endpoint, and application layers to continuously raise detection quality and coverage. Own the security logging and telemetry pipeline, ensuring the right data is collected, normalized, and usable for detection. Shape the operating model for the function, deciding what to build in-house versus deliver through managed services and strategic vendors. Modernize the SOC with automation and AI to increase coverage and speed up response. Manage incident playbooks, on-call and escalation paths, and run tabletop exercises. Build, manage, and coach a small team of detection and response engineers while applying threat intelligence to drive proactive detection and threat hunting. Deliver clear, executive-ready reporting on incident trends, coverage, and program maturity.
Required Qualifications
- Deep technical credibility and operational instincts, with a track record of building or scaling a detection engineering or security operations program
- Sound understanding of modern adversary tradecraft, with experience turning threat intelligence into practical detection strategies, proactive hunts, and response actions
- Experience extending a lean team's coverage through managed services or security vendors, including selecting partners and holding them accountable to measurable outcomes
- Track record leading incident command for security incidents involving multiple stakeholders, from working teams to executive leadership
- Excellent written and verbal communication, including reporting to executive audiences
- Familiarity applying automation or AI/ML techniques to security operations
- More than half of your time on-site in our San Francisco office, three days per week
Desired Qualifications
- A highly collaborative, low-ego approach to working across security, engineering, and other partner teams
- Excellent problem-solving instincts and comfort operating with ambiguity, including the judgment to think beyond established playbooks when a situation calls for it, and a steady, structured presence during active incidents
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.