Head of Detection & Response (Player Coach)

The best detection leaders I’ve met still love building. They still write code. They still review detections. They still enjoy understanding how attackers think. If that sounds like you, I’d love to talk. I’m hiring a Head of Detection & Response for one of the world’s most technically advanced engineering organisations. This isn’t a traditional management position. It’s a player-coach role where you’ll lead an exceptional engineering team while remaining deeply involved in the technical direction of modern detection engineering. You’ll work across detection strategy, behavioural analytics, telemetry, automation, threat hunting, engineering tooling, incident response and large-scale security engineering problems, partnering with some of the brightest engineers in the industry. You’ll need to be comfortable making technical decisions, mentoring experienced engineers, and helping build the next generation of detection capabilities. Successful candidates typically come from organisations such as CrowdStrike, Google, Microsoft, Mandiant, Meta, Netflix, Wiz, Palo Alto Networks, Datadog, SentinelOne or other engineering-led security organisations. Hybrid out of New York City – $500k-$700k TC

Responsibilities

Lead an exceptional engineering team; remain deeply involved in the technical direction of modern detection engineering; work across detection strategy, behavioural analytics, telemetry, automation, threat hunting, engineering tooling, incident response and large-scale security engineering problems; partner with some of the brightest engineers in the industry; make technical decisions; mentor experienced engineers; help build the next generation of detection capabilities

Requirements

Love building; write code; review detections; enjoy understanding how attackers think; comfortable making technical decisions; mentoring experienced engineers; helping build the next generation of detection capabilities

Nice to have

Experience from CrowdStrike, Google, Microsoft, Mandiant, Meta, Netflix, Wiz, Palo Alto Networks, Datadog, SentinelOne or other engineering-led security organizations