网络安全威胁检测与自动化经理
Cybersecurity Threat Detection & Automation Manager
网络安全威胁检测与自动化经理将领导一个团队，负责在企业、云、身份、端点、邮件、网络、SaaS和制造/OT环境中设计、开发、自动化、调优并持续改进高级威胁检测与响应能力。
这是一个需要亲自参与的领导角色。成功候选人不仅要管理、指导并为检测工程和自动化专业团队设定方向，还需深度参与技术交付工作。这包括审查检测逻辑、设计自动化流程、验证使用案例、提升警报准确性，并确保项目产生可衡量的安全成果。
该职位对减少攻击者停留时间、提高调查质量、通过自动化扩大响应规模，以及通过SIEM、SOAR、检测生命周期治理和工程规范来增强组织整体SecOps成熟度至关重要。
理想的候选人需具备深厚的检测工程专业知识、自动化经验、事件响应知识、强大的领导能力，以及在复杂企业环境中构建可扩展网络安全能力所需的项目管理纪律。
你将带来的影响
在此职位上，你将帮助现代化和提升组织的威胁检测与响应能力。你将领导一个团队，负责将对手行为、威胁情报、事件经验教训、红队发现和业务风险转化为可操作的检测、自动化流程、分析师指导和可衡量的安全成果。
你将直接影响：
- 企业、云、身份、端点、邮件、网络、OT和SaaS环境中的检测覆盖范围
- 警报准确性和误报减少
- 调查速度和分析师一致性
- SOAR自动化成熟度和响应可扩展性
- 检测生命周期治理、测试、验证和文档
- SIEM、SOAR、EDR、威胁情报和遥测平台上的SecOps现代化
- 减少手动分析和提高操作可重复性
- 与SOC、事件响应、威胁情报、IT、云、身份、网络、OT和业务团队的更强合作
最初发布于喜马拉雅山
查看英文原文
The Cybersecurity Threat Detection & Automation Manager will lead a team responsible for designing, developing, automating, tuning, and continuously improving advanced threat detection and response capabilities across enterprise, cloud, identity, endpoint, email, network, SaaS, and manufacturing/OT environments.
This is a hands-on player/coach leadership role. The successful candidate will not only manage, mentor, and set direction for a team of detection engineering and automation professionals, but will also remain deeply involved in technical delivery. This includes reviewing detection logic, shaping automation workflows, validating use cases, improving alert fidelity, and ensuring the program produces measurable security outcomes.
The role is critical to reducing attacker dwell time, improving investigation quality, scaling response through automation, and strengthening the organization’s overall SecOps maturity through SIEM, SOAR, detection lifecycle governance, and engineering discipline.
The ideal candidate combines deep detection engineering expertise, automation experience, incident response knowledge, strong leadership ability, and the program management discipline needed to build scalable cybersecurity capabilities in a complex enterprise environment.
The Impact You Will Make
In this role, you will help modernize and mature the organization’s threat detection and response capabilities. You will lead the team responsible for turning adversary behavior, threat intelligence, incident lessons learned, red team findings, and business risk into actionable detections, automation workflows, analyst guidance, and measurable security outcomes.
You will directly influence:
- Detection coverage across enterprise, cloud, identity, endpoint, email, network, OT, and SaaS environments
- Alert fidelity and false-positive reduction
- Investigation speed and analyst consistency
- SOAR automation maturity and response scalability
- Detection lifecycle governance, testing, validation, and documentation
- SecOps modernization across SIEM, SOAR, EDR, threat intelligence, and telemetry platforms
- Reduced manual triage and improved operational repeatability
- Stronger partnerships across SOC, Incident Response, Threat Intelligence, IT, Cloud, Identity, Network, OT, and business teams
Originally posted on Himalayas