Job Type: Full-Time
Job Location: Remote
Our client is seeking a Manager, Cyber Risk Management to lead the engineering and continued evolution of enterprise cyber defense capabilities. This is a highly technical leadership role focused on building the platforms, architecture, data, analytics, automation, and AI capabilities that enable modern threat detection and response.
The ideal candidate is not simply a SOC operations leader. We are looking for a cybersecurity engineering leader who understands how to architect, implement, integrate, and automate security technologies across SIEM, SOAR, EDR, NDR, cloud, endpoint, and on-premises environments — and who can apply AI/ML to fundamentally improve how a security organization detects, investigates, and responds to threats.
You will lead a team of approximately six technical professionals and own the strategy and roadmap for cyber defense engineering capabilities.
What You'll Do
- Lead and develop a team responsible for cyber defense platforms, detection engineering, security analytics, automation, and security engineering.
- Define and execute the technology roadmap for modern, scalable, and resilient cyber threat management capabilities.
- Architect and implement solutions across SIEM, SOAR, EDR, NDR, IPS, cloud security, endpoint security, and security analytics platforms.
- Drive the evolution of security operations through automation, orchestration, AI, and machine learning.
- Identify opportunities to integrate AI/ML into the cyber defense architecture, including threat detection, investigation, triage, analytics, response, and security automation.
- Develop capabilities that move beyond simply using AI tools toward integrating AI into the underlying security infrastructure, data, platforms, and workflows.
- Evaluate and implement agentic and deterministic automation to improve investigation and response capabilities.
- Build and improve security data and analytics capabilities that enable high-quality threat detection and actionable intelligence.
- Partner with Incident Response, Security Operations, Enterprise Architecture, Cloud, Infrastructure, and other technology teams to design and implement security capabilities.
- Support cyber threat investigations, threat hunting, forensic analysis, and incident response through engineering and platform capabilities.
- Ensure security platforms are scalable and resilient across Azure/cloud, on-premises infrastructure, and endpoint environments.
- Use Python and other scripting/automation technologies to develop security engineering and automation capabilities.
- Translate cybersecurity strategy and business risk objectives into actionable engineering roadmaps.
- Establish metrics and performance indicators to measure the effectiveness of cyber defense capabilities and identify opportunities for continuous improvement.
- Mentor engineers and develop expertise in emerging cybersecurity technologies, AI-enabled defense, automation, and modern threat detection.
- Evaluate emerging technologies and determine where AI, ML, automation, and orchestration can provide measurable improvements to cyber defense.
What We're Looking For
- 8+ years of progressive experience in cybersecurity, cyber defense, security engineering, cyber risk management, or related disciplines.
- At least 1 year of technical leadership or people management experience; 3+ years of leadership experience preferred.
- Strong background in cybersecurity engineering and security platform architecture.
- Experience leading or managing technical teams, ideally including a team of approximately 5–10 engineers.
- Deep experience with one or more enterprise security platforms such as:
- SIEM
- SOAR
- EDR/XDR
- NDR
- IPS
- Security analytics platforms
- Strong understanding of detection engineering, threat detection, security automation, orchestration, and incident response.
- Experience with security investigations, threat analysis, threat hunting, and/or digital forensics.
- Strong experience with Azure and cloud security environments, with an understanding of hybrid/on-premises security architecture.
- Hands-on experience with Python, scripting, or security automation development.
- Experience designing and implementing security architectures rather than simply administering or consuming security products.
AI / Machine Learning Experience
A critical component of this position is the ability to understand how AI and machine learning can be engineered into a cyber defense organization.
We are particularly interested in candidates who have:
- Designed or implemented AI/ML-driven cybersecurity capabilities.
- Integrated AI/ML into SIEM, SOAR, security analytics, detection, investigation, or response workflows.
- Used AI to improve threat detection, investigation, alert triage, threat intelligence, or automated response.
- Built or integrated agentic AI, LLM, or GenAI capabilities into security platforms or workflows.
- Developed architectures for incorporating AI into security data and telemetry pipelines.
- Automated previously manual security investigation or response processes using AI and/or machine learning.
- Evaluated how AI can improve the SOC infrastructure, security platforms, data, detection engineering, and response capabilities.
- Worked across cloud, on-premises, and endpoint environments to implement modern security automation.
The distinction is important: We are looking for someone who has helped build, architect, integrate, or engineer AI-enabled cybersecurity capabilities, not someone whose primary experience is simply using AI-powered security products.
Leadership & Strategy
The successful candidate will be able to move between technical architecture and strategic leadership.
You should be comfortable:
- Leading a team of cybersecurity engineers.
- Developing multi-year technology roadmaps.
- Evaluating emerging security and AI technologies.
- Translating business risk into technical capabilities.
- Working with senior security and technology leadership.
- Driving transformation across people, processes, data, and technology.
- Establishing measurable outcomes for security engineering initiatives.
- Building a culture of engineering, innovation, automation, and continuous improvement.
Never miss an opportunity! Create an alert based on the job you applied for.
