- Company Name
- Amtex Systems Inc.
- Job Title
- Senior Manager- Cybersecurity Detection
- Job Description
-
Job Title: Senior Manager – Cybersecurity Detection
Role Summary: Leads a cross‑functional detection engineering organization that designs, implements, and optimizes threat detection across multi‑cloud environments (AWS, Azure, GCP). Directs the development of SIEM/SOAR use cases, incident response support, and threat intelligence integration to protect enterprise assets and meet regulatory requirements.
Expectations: • Build and mentor a high‑performing detection team.
• Own the detection strategy, roadmap, and continuous improvement cycle.
• Ensure 24/7 detection coverage, rapid response, and effective communication to technical and executive stakeholders.
• Deliver measurable security metrics and demonstrate ROI of detection investments.
Key Responsibilities: • Define and execute detection engineering strategy and roadmap.
• Design advanced threat detection techniques with SIEM, EDR, NDR, SOAR, and data lake platforms.
• Develop custom detection rules, playbooks, and automated remediation tailored to MITRE ATT&CK coverage gaps.
• Conduct attack simulations, purple‑team exercises, and validate use‑case effectiveness.
• Manage SIEM/data lake ingestion, configuration, tuning, and retirement processes.
• Collaborate with Incident Response to enable rapid containment and post‑incident analysis.
• Integrate threat intelligence feeds to refine detection rules and mitigate emerging risks.
• Partner with security, engineering, and product teams to align detection capabilities with business goals.
• Maintain governance, compliance documentation (GDPR, PCI‑DSS, NIST) and ensure tools meet regulatory standards.
• Provide off‑hour support for critical security operations as required.
Required Skills: • 3+ years of people‑management in security detection or SOC leadership.
• Expertise in multi‑cloud security (AWS, Azure, GCP) and SIEM/SOAR platforms.
• Strong background in network, endpoint, cloud, identity, and email security monitoring.
• Proven ability to build scalable detection solutions and SOPs.
• Knowledge of MITRE ATT&CK, threat intelligence, and vulnerability management integration.
• Competence with Linux, macOS, Windows internals, network protocols, and secure architecture principles.
• Experience with ML concepts for threat detection and automation.
• Excellent communication, stakeholder engagement, and cross‑functional collaboration skills.
Required Education & Certifications: • Bachelor’s (or higher) in Computer Science, Cybersecurity, or related field.
• Certifications: CISSP, CISM, or equivalent; SOC‑specific credentials (GCIH, GCTI, GIAC Security Engineering) preferred.