Senior Manager, Threat Detection and Response

CLEAR - Corporate•Austin, TX

5d•$190,000 - $230,000•Onsite

About The Position

We are seeking an experienced incident response and threat detection leader to join our team as the Senior Manager, Threat Detection and Response. You will be responsible for the strategic direction of the CLEAR’s Security Operations Center, daily operations and investigations of potential security incidents, and driving operational excellence. You will drive change across both the larger Security organization and the rest of CLEAR’s attack surface by identifying and raising areas for improvement.

Requirements

4+ years of experience managing a team of incident responders and threat analysts including both technical management and people leadership.
8+ years experience performing incident response and SOC responsibilities.
Ability to communicate technical concepts in terms understandable by all stakeholders.
Working knowledge of security best practices, common vulnerabilities/attacks, and cloud infrastructure.
Experienced in performing digital forensics, threat hunting, and malware analysis.
Understanding of core concepts of networking, containerization, security automation, and operating systems (Windows, Linux, MacOS).
Thinking strategically to build both short term and long term roadmaps to drive iterative improvements.

Responsibilities

Hire, develop, and grow incident response and threat analyst talent by providing career growth support, effective leadership, and performance reviews.
Manage a team of geographically dispersed incident response and threat analysts responsible for monitoring CLEAR’s environment and investigating anomalies.
Develop and drive a strategic roadmap for continuous improvement to processes, tooling, and people.
Handle daily operations including driving operational excellence in investigations and providing investigation support.
Command complex security incidents working with executive leadership and cross-functional teams to drive containment and resolution.
Write strategic incident response playbooks and maintain relationships with cross-organizational stakeholders.
Prepare and run training tabletops for relevant cybersecurity incidents.
Collaborate with the Detection Engineering team to ensure new data sources are being onboarded, new detections are developed, and resiliency is baked into the security operations stack.
Make key tooling decisions including requirements gathering, running proof of concept trials, and maintaining relationships with key vendors.
Partner with the compliance organization to ensure the Security Operations Center maintains all compliance standards and provide evidence showing compliance.
Draft communications for Security Incidents for both internal and external stakeholders.