Engineering Manager, Detection and Response (14D6AFC)

Referment; New York (NY); On-site; USD 250,000 - 400,000; Full time

Job summary

Referment is seeking a leader to set strategy for the global Detection and Response function within Information Security. You will lead the team responsible for identifying and responding to incidents and work with senior stakeholders to prioritise improvements.

The role combines security engineering judgment with organisational leadership, monitoring enhancements, and partnerships with external security experts to strengthen the security program on a global scale.

Qualifications

• Extensive leadership of technical security teams required.
• Deep expertise in security-operations and incident response.
• Experience designing monitoring and auditing frameworks.
• Strong strategic judgment with ability to discuss technical detail.
• Exceptional communication with senior stakeholders.

Responsibilities

• Set direction for global incident detection and response and lead the technical team.
• Assess capabilities, prioritise improvements and strengthen monitoring frameworks.
• Evaluate automation and workflows to improve detection and response.
• Explain complex security issues and strategy to senior leaders.
• Engage external security partners and consultancies as needed.

Skills

Leadership

Incident response

Security operations

Monitoring frameworks

Stakeholder mgmt

Job description

Referment is working with a global investment and technology business to appoint the leader of its Detection and Response function. Within Information Security, you will set the strategy for global security operations and lead the team responsible for identifying and responding to incidents.

The remit combines organisational leadership, security-engineering judgement and close partnership with senior stakeholders. You will assess the current environment, strengthen monitoring and auditing, and decide where advanced technology can materially improve detection and response.

The Role

• Set direction for global incident detection and response and develop the technical team responsible for it.
• Assess current capabilities, prioritise improvements and build stronger monitoring and auditing frameworks.
• Evaluate automation and agentic workflows that can improve threat detection and response.
• Explain complex security issues and strategy clearly to senior leaders.
• Develop productive relationships with specialist external security partners and consultancies.

What We're Looking For

• Approximately 12 to 15 years of relevant experience, including leadership of technical teams.
• Substantial security-operations and incident-response expertise.
• Experience designing and implementing monitoring or auditing frameworks.
• Strong strategic judgement alongside the ability to engage with technical detail.
• Exceptional communication and stakeholder-management skills.

Relevant Desirable Experience

Red teaming, penetration testing, detection engineering or security consulting would be valuable. This could suit an established security-operations leader ready to shape a global detection and response capability.

#Referment