Engineering Manager, Detection and Response (14D6AFC)

Referment; New York (NY); On-site; USD 180,000 - 240,000; Full time

Job summary

Referment is seeking a senior leader to head its Detection and Response function within Information Security. You will set strategy for global security operations and lead the team responsible for identifying and responding to incidents, partnering with senior stakeholders and external security partners.

The role emphasises leadership, security-engineering judgement, and ongoing enhancement of monitoring and auditing capabilities across the organization.

Qualifications

• 12–15 years of relevant experience with leadership of technical teams.
• Substantial security-operations and incident-response expertise.
• Experience designing and implementing monitoring or auditing frameworks.
• Strong strategic judgement with ability to engage in technical detail.
• Exceptional communication and stakeholder-management skills.

Responsibilities

• Set direction for global incident detection and response and develop the technical team responsible for it.
• Assess current capabilities, prioritise improvements and build stronger monitoring and auditing frameworks.
• Evaluate automation and agentic workflows to improve threat detection and response.
• Explain complex security issues and strategy clearly to senior leaders.
• Develop productive relationships with specialist external security partners and consultancies.

Skills

Leadership

Security operations

Incident response

Monitoring frameworks

Stakeholder management

Strategic judgement

Communication

Job description

Referment is working with a global investment and technology business to appoint the leader of its Detection and Response function. Within Information Security, you will set the strategy for global security operations and lead the team responsible for identifying and responding to incidents.

The remit combines organisational leadership, security‑engineering judgement and close partnership with senior stakeholders. You will assess the current environment, strengthen monitoring and auditing, and decide where advanced technology can materially improve detection and response.

The Role

• Set direction for global incident detection and response and develop the technical team responsible for it.
• Assess current capabilities, prioritise improvements and build stronger monitoring and auditing frameworks.
• Evaluate automation and agentic workflows that can improve threat detection and response.
• Explain complex security issues and strategy clearly to senior leaders.
• Develop productive relationships with specialist external security partners and consultancies.

What We're Looking For

• Approximately 12 to 15 years of relevant experience, including leadership of technical teams.
• Substantial security‑operations and incident‑response expertise.
• Experience designing and implementing monitoring or auditing frameworks.
• Strong strategic judgement alongside the ability to engage with technical detail.
• Exceptional communication and stakeholder‑management skills.

Relevant Desirable Experience
Red teaming, penetration testing, detection engineering or security consulting would be valuable. This could suit an established security‑operations leader ready to shape a global detection and response capability.