Engineering Manager, Detection and Response (F56A089)

Referment; New York (NY); On-site; USD 180,000 - 300,000; Full time

Job summary

Referment is seeking a leader to head its Detection and Response function within Information Security. You will set the strategy for global security operations and lead the team responsible for identifying and responding to incidents.

The role combines organisational leadership with security engineering judgement and close partnership with senior stakeholders. You will build monitoring and auditing capabilities and drive improvements across the global security program.

Qualifications

• 12–15 years of relevant experience, including leadership of technical teams.
• Substantial security-operations and incident-response expertise.
• Experience designing and implementing monitoring or auditing frameworks.
• Strong strategic judgement and the ability to engage with technical detail.
• Exceptional communication and stakeholder-management skills.

Responsibilities

• Set direction for global incident detection and response and develop the technical team responsible for it.
• Assess current capabilities, prioritise improvements and build stronger monitoring and auditing frameworks.
• Evaluate automation and agentic workflows that can improve threat detection and response.
• Explain complex security issues and strategy clearly to senior leaders.
• Develop productive relationships with specialist external security partners and consultancies.

Skills

Leadership

Security operations

Incident response

Strategic judgement

Stakeholder management

Communication

Job description

Referment is working with a global investment and technology business to appoint the leader of its Detection and Response function. Within Information Security, you will set the strategy for global security operations and lead the team responsible for identifying and responding to incidents.

The remit combines organisational leadership, security-engineering judgement and close partnership with senior stakeholders. You will assess the current environment, strengthen monitoring and auditing, and decide where advanced technology can materially improve detection and response.

The Role

• Set direction for global incident detection and response and develop the technical team responsible for it.
• Assess current capabilities, prioritise improvements and build stronger monitoring and auditing frameworks.
• Evaluate automation and agentic workflows that can improve threat detection and response.
• Explain complex security issues and strategy clearly to senior leaders.
• Develop productive relationships with specialist external security partners and consultancies.

What We're Looking For

• Approximately 12 to 15 years of relevant experience, including leadership of technical teams.
• Substantial security-operations and incident-response expertise.
• Experience designing and implementing monitoring or auditing frameworks.
• Strong strategic judgement alongside the ability to engage with technical detail.
• Exceptional communication and stakeholder-management skills.

Relevant Desirable Experience

Red teaming, penetration testing, detection engineering or security consulting would be valuable. This could suit an established security-operations leader ready to shape a global detection and response capability.

#Referment