Senior Manager, Detection and Response

Job Description:

As a Detection & Response manager, you will be responsible for protecting Outreach's customers, employees, and brand. You will be able to build on your deep technical knowledge and previous incident response experiences in a rapidly growing global SaaS platform.

In This Role You Will:

• Lead the Operations & Incident Management team in the protection, detection, response, and recovery of Outreach security across application, cloud, and enterprise domains
• Lead response to security incidents as Incident Commander
• Maintain and contribute code for our detection and alerting pipeline
• Automate detections and response end-to-end, including enrichment and filtering
• Hunt for threats across enterprise and production environments, leveraging your experience and security intuition
• Act as an escalation point for the tier1/tier2 investigative team
• Perform variant analysis and root cause analysis
• Develop creative solutions to complex security problems which balance business needs and risk
• Perform regular on-call responsibilities both during and off regular business hours (including nights, weekends & holidays), including fulfilling various incident response team roles
• Work together with other security engineers and stakeholders to architect and deploy enterprise security solutions
• Conduct research to identify threats, vulnerabilities, and trends that may impact Outreach.
• Develop and publish emerging threat impact statements and customer communications
• Assist with the facilitation of security tabletop exercises
• Establish and provide audit evidence and support for various compliance requirements (to include meeting with auditors for ISO 27001/27701, SOC2, and HIPAA)
• Provide security operations subject matter expertise for high priority or high impact security and business efforts (RFPs, ongoing deals, etc.)

Our Ideal Candidate Will Have

• 8+ years detection & response work in a high-demand security team
• Proficiency in reading and writing programming languages like Go, Terraform, JavaScript, etc.
• Strong knowledge of common attack vectors
• Experience working with a Managed Services Security Provider (outsourced SOC)
• Familiarity with AWS, Azure, and Container (Kubernetes) security
• Experience with common Linux / Mac OS command line, security monitoring, log analysis, and forensic tools
• Ability to work with a high degree of autonomy
• Have a passion to learn and thrive in a dynamic and constantly changing environment
• Excellent analytical thinking, time management and coordination skills