Detection & Response Leader

Iceberg; New York (NY); On-site; USD 180,000 - 260,000; Full time

Job summary

Iceberg in New York is seeking a highly technical Detection & Response leader who has built detection capabilities, solved complex security problems hands-on, and can lead a team of strong security engineers.

You'll set technical direction and develop the team, but you'll also be expected to go deep, whether that's designing a new detection approach, interrogating telemetry, prototyping tooling, working through a sophisticated incident, or helping solve a problem where there isn't an obvious

Qualifications

• Built detection capabilities and led detection initiatives.
• Hands-on security engineering experience is required.
• Strong telemetry analysis and tooling prototyping skills.

Responsibilities

• Set technical direction for the Detection & Response team.
• Develop and coach security engineers and cultivate talent.
• Design new detection approaches and prototype tooling.
• Interrogate telemetry and investigate sophisticated incidents.
• Explain design choices and their rationale to stakeholders.

Skills

Built detection capabilities

Hands-on security engineering

Telemetry analysis

Team leadership in security

Job description

This is a leadership role for someone who still thinks and operates like an engineer.

We're looking for a highly technical Detection & Response leader who has built detection capabilities, solved complex security problems hands-on, and can lead a team of strong security engineers. You'll set technical direction and develop the team, but you'll also be expected to go deep, whether that's designing a new detection approach, interrogating telemetry, prototyping tooling, working through a sophisticated incident, or helping solve a problem where there isn't an obvious off-the-shelf answer.

The ideal person combines technical execution, engineering judgement and strong people leadership.

We're particularly interested in people who have:

• Built detection capabilities rather than simply operated SIEM/EDR platforms.
• Strong understanding of endpoint, network and/or cloud telemetry.
• Used software engineering, automation, data analysis or ML to solve detection problems.
• Personally taken ambiguous security problems from hypothesis through prototype and into production.
• Led and developed technically strong security engineers.
• Made decisions around telemetry, tooling and engineering investment and successfully gained stakeholder buy-in.
• The ability to explain not only what they built, but how it worked and why they designed it that way.

This is all happening within a high bar security engineering team within a world leading trading firm.