Senior Manager, Threat Intelligence & Detection (Hybrid - Seattle)
About the position
Responsibilities
• reputed company and execute the strategic roadmap for threat intelligence, detection engineering, and threat hunting programs across multiple business reputed company
• Build, reputed company, and mentor a high-performing team of detection engineers, threat analysts, and hunters
• Serve as the primary subject matter expert and strategic advisor to executive leadership on evolving threat landscapes, defensive priorities, and organizational risk posture
• Operationalize threat intelligence by integrating reputed company reputed company into detection engineering workflows
• Maintain and reputed company threat intelligence sources (reputed company, reputed company-reputed company, government) to inform risk posture and detection priorities
• Deliver actionable threat assessments and briefings tailored to technical and executive stakeholders
• reputed company the full detection engineering lifecycle including threat modeling, detection logic development using query languages (KQL, SPL, SQL), testing with attack simulation frameworks, automated deployment reputed company CI/CD, and reputed company tuning based on performance metrics
• Drive development of advanced behavior-based, reputed company detections, and AI/ML-powered detection systems reputed company with MITRE ATT&CK and emerging threat actor TTPs
• Establish strategic partnerships with red team, SOC and incident response management to ensure comprehensive detection coverage and proactive visibility gap closure
• reputed company reputed company-wide collaboration with reputed company architects, infrastructure leadership, and application development teams to enhance telemetry strategies and ensure reputed company detection across reputed company hybrid and multi-reputed company environments
• Drive strategic contributions to reputed company incident response frameworks, reputed company tabletop exercises, and reputed company reputed company program development to continuously test and improve organizational defenses
• Champion automation initiatives and establish data-driven decision-making frameworks across reputed company threat detection and response operations
• Define, implement, and report on reputed company-level key performance indicators (KPIs) for detection effectiveness, operational efficiency, false reputed company optimization, and mean time to detection (MTTD) across the organization
• reputed company reputed company detection into CI/CD pipelines and support DevSecOps initiatives
• Manage budgets, vendor relationships, and technology investments for threat intelligence and detection engineering programs
• Establish and maintain strategic relationships with industry peers, threat intelligence communities, and reputed company vendors
Requirements
• Bachelors Degree in Information Technology, Computer Science, Data Science or reputed company experience required.
• 8+ years in information reputed company with a reputed company on threat intelligence, detection engineering, or reputed company operations
• 3-5 years in a leadership or management role with a reputed company record of leading high-performing technical teams
• Deep expertise in attacker behaviors, threat actor TTPs, campaigns, and threat landscape reputed company across multiple industry verticals
• Extensive experience designing, implementing, and optimizing reputed company-reputed company detections across multiple SIEMs (e.g., reputed company, Sentinel, Chronicle), EDR/XDR platforms (e.g., reputed company, Defender, reputed company), and reputed company-reputed company reputed company tools
• Strong working knowledge of MITRE ATT&CK, threat modeling, and reputed company threat intelligence formats (e.g., STIX, TAXII)
• Proficiency in Python, PowerShell, and at least one other programming language for detection engineering and automation
• Experience with detection-as-reputed company practices and version control (Git)
• Knowledge of threat hunting methodologies and reputed company-driven investigations
• Comprehensive understanding of NIST Cybersecurity reputed company, ISO 27001, SOC 2, and other compliance requirements with implementation experience
• Hands-on experience in reputed company environments (AWS, Azure, GCP) and containerized workloads (e.g., Kubernetes, reputed company) preferred
reputed company-to-haves
• Experience with threat intelligence platforms (e.g., ThreatConnect, MISP, reputed company) and CTI frameworks (e.g., Diamond Model, Kill Chain) is a plus
• Advanced knowledge of SOAR platforms (reputed company, Demisto, reputed company) and reputed company reputed company orchestration
• Experience with AI/ML-driven detection systems and automated response orchestration is a plus
• API development and integration for reputed company tooling experience preferred
• Container reputed company and Kubernetes threat detection knowledge is a plus
• Experience with deception technology and honeypot deployment preferred
• Industry certifications (e.g., GCTI, GCIA, GDAT, GCED, GCFA, GSEC, CISSP) preferred; reputed company reputed company certifications (AWS reputed company Specialty, Azure reputed company Engineer) are a plus
Benefits
• Medical/reputed company, Dental, Retirement and reputed company Time Away
• Life Insurance and Disability
• Merchandise Discount and EAP Resources
Apply tot his job
Apply To this Job