Manager, Threat Detection and Response

Car Gurus • Boston, MA

32d • Hybrid

About The Position

CarGurus is seeking a Manager of Threat Detection and Response to help meet the evolving needs of our dynamic technical environment. Reporting to our Director of Information Security, you will play a key role in ensuring the security of CarGurus' network and cloud infrastructure by maturing the monitoring and response programs and the scalability of our security detection and response capabilities.

Requirements

• 7+ years in cybersecurity, with deep, hands-on experience in Incident Response, Detection Engineering, and/or Cloud Security.
• 3+ years in a formal leadership role, with a proven track record of coaching and developing small, highly technical teams.
• Direct, hands-on experience as an Incident Commander for complex security incidents.
• Practical experience with Detection & Response tools for network, endpoints, cloud, and identity as well as SOAR platforms.
• Demonstrate a strong security engineering and architecture background to best understand how to employ the most effective and efficient security monitoring.
• Deep expertise in AWS security and architecture (e.g., GuardDuty, CloudTrail, IAM) and a forward-looking vision for implementing currently-immature controls (e.g., SCPs, Control Tower).
• Hands-on experience with container security and data-layer security.
• Expert level knowledge on the attack kill chain and diamond model.
• Proven experience building or managing a "Detection-as-Code" program.
• Expertise in operationalizing the MITRE ATT&CK framework to measurably improve detection coverage.

Responsibilities

• Serve as the primary Incident Commander (IC) for significant security incidents, leading with a calm, decisive, and transparent approach from detection to remediation.
• Collaborate with the cross-functional incident response team to ensure rapid detection and containment of cyber threats.
• Act as a coach to develop and mature the Incident Response program, including on-call rotations, playbooks, and training a bench of future ICs.
• Collaborates with the Threat Detection and Response team to continuously improve cybersecurity capabilities in identification, management, and response to threats in the most efficient and effective manner.
• Lead the modernization of our detection and response program, establishing a "Detection-as-Code" (DaC) framework using version control and CI/CD principles.
• Foster a culture of rapid testing, iteration, and continuous improvement of all detection logic to reduce false positives and increase fidelity.
• Use your expertise in AWS security, Terraform, and Hashicorp Sentinel to influence the maturation of our cloud security posture.
• Challenge assumptions and experiment with novel approaches to gain visibility and enforce security policy as code in our cloud environments.
• Lead, mentor, and empower your team of security engineers, fostering a growth mindset and an environment of learning and development.

Benefits

• We reward our Gurus' curiosity and passion with best-in-class benefits and compensation, including equity for all employees, both when they start and as they continue to grow with us.
• Our career development and corporate giving programs, as well as our employee resource groups (ERGs) and communities, help people build connections while making an impact in personally meaningful ways.
• A flexible hybrid model and robust time off policies encourage work-life balance and individual well-being.
• Thoughtful perks like daily free lunch, a new car discount, meditation and fitness apps, commuting cost coverage, and more help our people create space for what matters most in their personal and professional lives.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Industry: Publishing Industries
• Education Level: No Education Listed
• Number of Employees: 1,001-5,000 employees