Threat Informed Defense Senior Manager

What you'll do

• Translate raw threat intelligence into actionable defensive outcomes across managed security stacks.
• Structure, normalize, and operationalize threat data to drive detection, hunting, and response activities.
• Define how TTPs, malware, infrastructure, and telemetry are consumed across TIP, SIEM, SOAR, and EDR platforms.
• Develop and govern detection engineering content including YARA rules, Sigma rules, and behavioral signatures.
• Design and implement technical architectures that make threat intelligence machine-consumable at enterprise scale.
• Establish and govern data structures, common schemas, and normalization standards across multiple security tools.
• Lead the development of threat hunt programs across network, identity, cloud, and OT data sources.
• Manage and mentor a team of technical leads and managers within the cyber threat intelligence program.

What we're looking for

• Minimum of 10 years of experience in cyber threat intelligence, threat-informed defense, detection engineering, threat hunting, or security operations.
• Minimum of 5 years leading technical teams, including second-line leadership of other team leads or managers.
• Minimum of 5 years of experience with the core security stack (TIP, SIEM, SOAR, and EDR) and operationalizing intelligence.
• Minimum of 5 years of hands-on experience with structured threat data and the MITRE ATT&CK framework.
• Minimum of 5 years of experience defining or governing data structures, schemas, or normalization standards across multiple tools.
• Bachelor's degree in a relevant field, or equivalent professional experience (minimum 12 years for those without a degree).
• Strong written and verbal communication skills to brief executive and client stakeholders.
• Advanced degree in computer science or cybersecurity, and certifications like GCTI, GREM, GCFA, GDAT, GCDA, or CISSP (preferred).