Cybersecurity Threat Detection – Automation Manager

Job Description:

  • Lead, manage, mentor, and develop a team of detection engineering and automation professionals
  • Define and execute threat detection and automation strategy aligned with business risk, threats, compliance, and organizational priorities
  • Establish intake, prioritization, backlog management, planning, peer review, release readiness, metrics, and continuous improvement processes
  • Design, develop, tune, and optimize threat detections across SIEM, EDR, identity, cloud, email, network, OT, SaaS, and other security platforms
  • Own high-impact detections for complex use cases, critical risks, advanced adversary behaviors, and enterprise threats
  • Translate adversary behavior, threat intelligence, incident findings, red team results, vulnerability exposure, and business risk into actionable analytics
  • Conduct detection gap analysis and threat modeling
  • Build detection validation practices with test cases, replay or verification methods, regression checks, tuning evidence, performance monitoring, and analyst feedback
  • Lead SIEM and SOAR detection and response workflows
  • Build SIEM content including correlation rules, notable events, dashboards, risk-based alerts, data models, investigation views, and alert enrichment
  • Develop SOAR playbooks for enrichment, triage, evidence collection, case creation, containment recommendations, response actions, and analyst decision support
  • Identify and automate repetitive, high-volume, or high-value SOC activities
  • Drive integrations across SIEM, SOAR, EDR, email security, identity, threat intelligence, ITSM, cloud, network, PAM, DLP/CASB, and OT platforms
  • Build and mature the detection and automation lifecycle from intake through retirement
  • Manage the detection and automation roadmap and program metrics
  • Resolve telemetry gaps, data quality issues, logging deficiencies, enrichment needs, and unclear ownership
  • Maintain audit-ready documentation and communicate strategy, risk coverage, maturity, roadmap, and outcomes to technical, non-technical, and executive stakeholders

Requirements:

  • 10+ years of cybersecurity experience working in SOC and in creating SIEM correlations/detections and automating incident information enrichment tasks
  • Experience building mature detection lifecycle practices, including intake, prioritization, testing, tuning, monitoring, regression checks, peer review, and controlled releases
  • Experience building SOAR playbooks and automation workflows
  • Experience with detection-as-code, Git-based content management, CI/CD pipelines, automated testing, reusable detection templates, and scalable engineering patterns
  • Experience operationalizing threat intelligence into detection priorities, hunting queries, enrichment workflows, and response playbooks
  • Experience designing detections for identity-based attacks, endpoint, email, network, cloud, SaaS, OT/ICS, DLP, and privileged access use cases
  • Experience working in large, complex enterprise or manufacturing environments
  • Experience partnering with SOC, Incident Response, Threat Intelligence, Vulnerability Management, Cloud, Identity, Network, OT, Legal, Privacy, GRC, and IT teams
  • Ability to distinguish detection, telemetry, control, ownership, and response process gaps
  • Excellent analytical and problem-solving skills
  • Demonstrated ability to lead, coach, and advise team members across cultural, geographic, technical, and generational boundaries
  • Passion for automation, continuous improvement, high-quality engineering practices, and scalable security systems
  • Technical competency with Splunk SPL, risk-based alerting, notable events, dashboards, correlation searches, SOAR, MITRE ATT&CK, Entra ID, EDR, CNAPP, DNS, proxy, firewall, VPN, GlobalProtect, OT/ICS, PAM, CyberArk-style telemetry, ITSM, Git, and CI/CD
  • Master’s degree is listed as preferred, not required

Benefits:

    Back to blog

    Other Jobs To Apply

    Amazon Delivery Driver

    REMOTE - Entry-Level Management Training (Work from Home)No Experience Needed Full Training Provided

    Delta Airlines (Data Entry) Work From Home Position Jobs - Apply Now

    Film & TV Development & Production Internships: LA - Summer 2026

    `Remote Entry-Level Role | Beginner Friendly | Full/Part-Time | Start ASAP

    Work From Home Remote Entry Level -Focus Group Position

    Fulfillment Center Warehouse Associate

    Robotics Warehouse Associate

    amazon warehouse associate $15+/ Hour (Sign on Bonus)!

    Amazon Warehouse

    Sr. Operations Manager

    Delivery Driver(06993) - 2753 W Washington

    "Fully Remote Benefits Representative | Flexible Schedule | Hiring Immediately

    Fulfillment Workplace Health and Safety Specialist Intern 2026 - AZ, CA, CO, NM, NV, OH, OK, TX, UT, WA - Now Hiring

    Software Development Engineer III (ADBL189)

    Want to Work From Home? Provide Customer Service Support for Leading Cruise Lines - Flexible Hours

    DJZ5 - $23.75hr - New Jersey - Amazon DSP Delivery Driver

    EHS Specialist

    Sales Associate- Redding

    Team Member

    Remote Travel Specialist (part time)

    Remote Data Entry -Time Focus Group Participants (Up To $750/Week)

    Data Entry Clerk Work From Home - Part-Time Focus Group Participants (Up To $750/Week)

    Remote Healthcare Customer Service Representative

    -Urgent Hiring | Entry-Level Remote Role | Flexible Schedule | Apply Today

    REMOTE - Entry-Level Management Training (Work from Home)No Experience Needed Full Training Provided

    Easy Remote Academic Transcription Jobs No Experience

    Immediate Hiring: Virtual Scheduling Assistant-Entry Level

    Remote Live Chat Assistant – Entry-Level Customer Support Specialist (No Experience Required | $35/Hour)

    Flight Monitor, Amazon - Prime Air

    Amazon Prime Delivery Driver $18-$26/hr

    Sr. Operations Manager

    EHS Specialist

    Warehouse Team Member

    Warehouse Associate - $18.00/hour

    Work From Home - Up to $750/ week

    (Part Time) Data Entry - Remote Jobs

    Part-Time Doorstep Trash Collection Specialist - Weekends

    Front Desk Concierge (Part-Time / Weekend)

    EHS Specialist

    Area Manager, Early Career (2027) - AR, MS, OK, LA

    Warehouse Worker - Central NJ-OCS (collapsed into 763300000)

    Amazon Customer Service Representative (Remote)

    Remote Customer Service Specialist

    Heavy Equipment Operator

    Certified Nursing Assistant (CNA) Jobs in Tucson, AZ — $19–$21/hr, Flexible Shifts

    Remote Travel Booking Agent (Flexible Schedule)

    Pathways Operations Manager Intern - Summer 2027 - Now Hiring

    Supervisory Transportation Security Officer

    Paid Panel Immediate Start - Remote Part-Time - Customer Service Representative Welcome