Huntress is a remote-first cybersecurity company founded by former NSA cyber operators, dedicated to making enterprise-grade cybersecurity accessible to businesses of all sizes. The role involves leading the Detection Engineering team to design, test, and deploy detection logic, ensuring effective identification and mitigation of malicious activities across millions of endpoints.
Responsibilities:
- Design, implement, and uphold internal processes to reduce latency and facilitate detection engineering work-products for data-constrained environments
- Meet with detection engineers in a 1:1 setting weekly to socialize, focus initiatives, gather feedback, and provide feedback, and enable analysts to progress rapidly in their careers
- Work with the Product and Engineering organizations to prioritize the creation of new capabilities with the goal of producing highly reliable detections
- Engage with our Support organization to create streamlined workflows for partner/constituent requests for detection engineering support, not limited to responding to false positives and developing new detections
- Provide technical leadership for detection engineers with multidisciplinary expertise
- Ensure team members fully understand the goals and objectives of Huntress’ mission and how their work fits into the bigger picture
- Provide key input and guidance to company stakeholders such as Marketing, the SOC, Support, and Product
- Develop, track, and report on Objectives and Key Results linked to the Detection Engineering focus initiatives
- Develop detection opportunities for new technologies and services that Huntress brings to market
- Participate in public speaking engagements in both webinar and in-person formats
Requirements:
- Experience in leading cybersecurity teams with diverse skills and backgrounds in one or more of the following areas: Security Operations, Digital Forensics, Incident Response, Malware Analysis, Threat Hunting, or Detection Engineering
- 4+ years of experience in detection engineering or a related specialty (e.g., threat hunting, adversary emulation)
- 2+ years of experience managing or leading a detection engineering, threat hunting, or security research team
- Actively engaged in the information security community by attending conferences or contributing to conversations/projects in the public domain
- Continually learning and staying up to date on the latest threat actor tradecraft, detection techniques, and security operations concepts
- Ability to identify workflows being performed and create detailed process diagrams and operating procedures
- Effective communicator of highly technical concepts to stakeholders of varying technical backgrounds
- Experience using platforms such as Elasticsearch or Data Dog to analyze and review data at scale
- Demonstrated experience leading initiatives or projects that required delegation and accountability to achieve success
- Data-driven approach with experience in Data Science concepts or statistical analyses