Threat Detection Product Management

Exabeam is a global cybersecurity leader delivering AI-driven security operations for threat detection, investigation, and response. The role leads the strategy and execution of threat detection content, behavioral analytics, and threat intelligence while engaging customers and cross-functional teams to shape a forward-looking detection roadmap. It combines hands-on threat research and detection analysis with organizational and technical leadership.

Responsibilities:

• Establish threat detection roadmap with quarterly objectives, and execution plans aligned with company strategy
• Serve as a Subject Matter Expert for threat detection and response, setting the direction for detection engineering, behavioral analytics, and threat research
• Collaborate closely with Product Management, Threat Research, Engineering, Field teams to translate learnings from real world threats into product capabilities that provide the entire customer base value
• Contribute to customer and field enablement on threat detection and response topics
• Foster a culture of technical excellence, innovation, collaboration, and continuous improvement
• Guide research into emerging attacker tactics, techniques, procedures (TTPs), Agentic AI and adversary behaviors across enterprise, cloud, identity, and SaaS environments
• Levering metrics and real world feedback, drive the portfolio of detections, behavioral models, and analytics for the Exabeam product lines
• Continuously evaluate new attack techniques and validate detection efficacy through real world usage and feedback
• Perform hands-on threat research, threat analysis, incident analysis, detection tuning, and content validation where appropriate
• Balance strategic initiatives with operational execution to ensure timely delivery of research content and product updates

Requirements:

• 10+ years of experience in cybersecurity with significant expertise in threat detection, security research, threat intelligence, detection engineering, incident response, or related disciplines
• 5+ years operating SIEM, UEBA or similar threat detection and response platforms
• 3+ years working with customers in a professional services or product support role
• Deep understanding of modern attacker methodologies including MITRE ATT&CK, identity attacks, endpoint threats, cloud attacks, Agentic AI threats, insider threats, and lateral movement techniques
• Demonstrated experience developing high-quality security detections, behavioral analytics, correlation rules, or detection content for enterprise security products
• Strong understanding of UEBA, SIEM, behavioral analytics, and detection engineering principles
• Experience working with large-scale security telemetry including endpoint, identity, cloud, authentication, network, SaaS, and infrastructure logs
• Experience working with APIs, automation frameworks, and modern development workflows
• Strong analytical skills with the ability to evaluate detection quality, reduce false positives, and improve behavioral fidelity
• Excellent written and verbal communication skills with experience presenting technical concepts to both executive and technical audiences
• Proven ability to influence cross-functional teams and drive technical strategy
• Hands-on experience with the Exabeam platform and a deep understanding of the New-Scale Analytics engine
• Experience building behavioral models, machine learning features, or advanced detection logic
• Practical experience leveraging Generative AI, LLMs, agentic workflows, or AI-assisted development to improve engineering productivity and research effectiveness
• Experience with cloud platforms including AWS, Azure, and Google Cloud Platform
• Knowledge of identity providers such as Microsoft Entra ID, Okta, Active Directory, and hybrid identity environments
• Experience with malware analysis, reverse engineering, digital forensics, or incident response
• Familiarity with AI safety, evaluation, or prompt engineering techniques
• Security certifications such as CISSP, GREM, GCIH, GCFA, GPEN, OSCP, OSCE, GXPN, or equivalent
• Experience working in a commercial cybersecurity product organization