Senior MXDR Manager – 24/7 Incident Response Leader

Todyl, Inc.; Atlanta (GA); Hybrid; USD 160,000 - 200,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

HSA/FSA options

Life insurance and disability coverage

Competitive 401(k)

Flexibility & Time Off

Flexible PTO + 13 holidays

Generous parental leave

Job summary

Todyl, Inc. is seeking a Senior Manager to lead the MXDR team, including DRAMs and analysts, across day, evening, and overnight shifts.

You will own SLA attainment, incident quality, and the partner-facing outputs, ensuring reliable detection and response for MSPs and their customers. The role requires experience leading dispersed security teams, strong governance of work quality, and collaboration with engineering and threat intelligence.

Qualifications

• 7+ years in security operations, incident response or detection and response.
• 3+ years managing security/technical teams, 10+ people.
• Experience leading dispersed teams across sites and shifts.
• Advanced industry certifications preferred (e.g., GCIH, GCIA, CISSP, CISM).
• Bachelor's degree or equivalent experience required.

Responsibilities

• Lead MXDR team, manage DRAMs and analysts, oversee performance and hiring.
• Own shift coverage, PTO, and scheduling across day, evening, overnight rotations.
• Develop leads for Partner Security Advisor and Detection & Response Operations.
• Define and attain SLA for MXDR and manage alert-to-case lifecycle.
• Oversee incident reviews, detection quality, and changes to processes.
• Define AI-assisted triage boundaries and ensure responsible use of AI in workflows.
• Set direction with Detection Engineering, Threat Intelligence and Platform Engineering.

Skills

Security operations

Incident response

Detection & response

Team leadership

24/7 leadership

Stakeholder communication

Education

Bachelor's degree or equivalent

Advanced certifications (preferred)

Job description

Todyl, Inc. is seeking a Senior Manager to lead the MXDR team, including DRAMs and analysts, across day, evening, and overnight shifts.

You will own SLA attainment, incident quality, and the partner-facing outputs, ensuring reliable detection and response for MSPs and their customers. The role requires experience leading dispersed security teams, strong governance of work quality, and collaboration with engineering and threat intelligence.