高级经理，网络钓鱼下架
Senior Manager, Phishing-Takedown
职位名称 - 高级经理，钓鱼网站下架
职位简介
我们正在寻找一位经验丰富的高级经理，负责在网络安全或信任与安全组织中领导钓鱼网站下架工作。该职位将负责管理钓鱼事件检测的整个生命周期、合作伙伴关系管理（注册商、托管服务商、平台）、快速下架、流程优化和团队领导。成功候选人将确保对组织品牌、客户和数字生态系统的威胁得到迅速、有效且全球范围内的缓解。
主要职责
制定并执行钓鱼网站下架操作的全球战略：定义SLA（例如，域名/URL在数小时内下架）、工作流程、升级路径和绩效指标。
领导和管理负责钓鱼网站下架和滥用修复的团队：设定目标，指导员工，管理预算并推动持续改进。
与外部利益相关者建立并维护牢固的关系：域名注册商、TLD/ccTLD注册机构、托管/CDN服务商、执法联络人、平台滥用支持团队和技术合作伙伴。
与外部合作伙伴协商谅解备忘录（MOUs）、优先下架协议、数据共享或API访问权限，以确保快速响应能力。
监督整个下架流程：从钓鱼网站的检测/初步评估、验证、合作伙伴沟通、下架执行、确认和报告。
与威胁情报、SOC、产品、法律/合规和安全运营团队合作，使下架工作与更广泛的事件响应和品牌保护计划保持一致。
监控钓鱼和数字滥用趋势（域名、冒充网站、恶意应用、社交媒体滥用），并利用洞察来优化策略、工具和工作流程。
确保准确跟踪和报告KPI：下架时间、成功率、数量、合作伙伴表现、每案成本、升级情况和剩余风险。
推动自动化、工具开发和流程优化：构建或优化内部平台，集成检测信息源，开发仪表盘并实现运营规模扩展。
确保符合相关法律法规、互联网治理框架（ICANN、注册商政策）、数据保护、证据处理和审计准备要求。
任职资格与经验
网络安全、信息技术、计算机科学或相关领域的学士学位。硕士或相关认证（CISSP、CEH）优先
查看英文原文
Job Title - Senior Manager, Phishing-Takedown
About the Role
We are seeking a seasoned and strategic Senior Manager to lead the phishing takedown function within a cybersecurity or trust & safety organisation. This role will be responsible for overseeing the full lifecycle of phishing incident detection, partner-relationship management (registrars, hosting providers, platforms), rapid takedowns, process refinement and team leadership. The successful candidate will ensure that threats to the organisations brand, customers and digital ecosystem are mitigated swiftly, effectively and globally.
Key Responsibilities
Develop and execute the global strategy for phishing takedown operations: define SLAs (e.g., domain/URL takedown within hours), workflows, escalation paths and performance metrics.
Lead and manage the team responsible for phishing takedown and abuse remediation: set objectives, mentor staff, manage budgets and drive continuous improvement.
Establish and maintain strong relationships with external stakeholders: domain registrars, TLD/ccTLD registries, hosting/CDN providers, law-enforcement liaisons, platform abuse desks and technology partners.
Negotiate outlines of understanding (MOUs), priority takedown agreements, data-sharing or API access with external partners to ensure rapid response capabilities.
Oversee the end-to-end takedown process: from detection/triage of phishing sites, verification, partner engagement, takedown execution, confirmation and reporting.
Collaborate with threat intelligence, SOC, product, legal/compliance and security operations teams to align takedown efforts with broader incident response and brand-protection programmes.
Monitor phishing and digital-abuse trends (domains, impersonation sites, malicious apps, social-media abuse) and use insights to refine strategy, tooling and workflows.
Ensure accurate tracking and reporting of KPIs: takedown time, success rates, volumes, partner performance, cost per case, escalations and residual risk.
Drive automation, tooling and process optimisation: build or refine internal platforms, integrate detection feeds, develop dashboards and enable scaling of operations.
Ensure compliance with relevant laws, internet governance frameworks (ICANN, registrars policies), data-protection, evidence-handling and audit readiness.
Qualifications & Experience
Bachelors degree in Cybersecurity, Information Technology, Computer Science or a related field. Masters or relevant certification (CISSP, CEH) is a plus.
Minimum 710 years professional experience in phishing takedown, abuse response, brand-protection, trust & safety or cybersecurity operations with proven leadership experience.
Demonstrable experience working with domain registrars/TLDs, hosting/CDN providers, abuse desks, WHOIS/DNS processes, registrar/registry policy, and takedown workflows.
Proven success in managing high-volume takedowns, setting and meeting SLAs, partner management and contract negotiation.
Strong stakeholders/partner-management skills and ability to influence external organisations (registrars, platforms, governments).
Excellent analytical and problem-solving skills; comfortable interpreting detection/incident-data and driving action.
Outstanding communication skills (verbal & written) with ability to engage senior leaders, partners and cross-functional teams.
Familiarity with automation tooling, CI/CD of takedown workflows, dashboards/metrics and threat-intelligence integration.
Key Competencies & Behaviours
Strategic mindset: able to design and implement takedown strategy aligned with business objectives.
Results-oriented: focused on measurable outcomes rapid takedown, reduced risk exposure, partner performance improvements.
Leadership & team building: able to mentor the team, drive high performance and create a culture of continuous improvement.
Influential partner manager: builds trust and credibility with external and internal stakeholders.
Adaptable and resilient: comfortable handling high-pressure incidents, evolving threat landscapes and global operations.
Ethical and trustworthy: ensures high standards of confidentiality, integrity and compliance in all operations.
What We Offer
Competitive salary and performance-based incentives aligned with experience and outcomes.
Opportunity to play a critical leadership role in protecting brand, customers and digital assets from phishing and online abuse.
Exposure to cutting-edge cybersecurity operations, global partner networks and high-impact programmes.
A collaborative, growth-oriented environment with opportunity to shape our takedown strategy and operational architecture.
Apply now!
Originally posted on Himalayas