Manager, Detection and Response

Overview

Job Posting Title: Manager Detection and Response

 

Location: U.S. Remote

 

Pay: starting at 135K DOE+ Benefits

 

Position Summary:

The Manager Detection & Response is responsible for leading New American Funding’s detection engineering, incident response, security operations center (SOC), and threat hunting functions. This role blends operational leadership with deep technical expertise and serves as the incident commander during critical events.

As both a manager and a hands-on leader, this role directs a team of analysts and engineers to enhance detection capabilities, refine response processes, and collaborate with business and technology stakeholders during high-impact incidents.

 

Identity Verification checks are in place throughout the Candidate journey to prevent candidate fraud

Responsibilities

Security Operations Leadership

 

• Lead day-to-day operations of the SOC, ensuring rapid detection, triage, and response to cybersecurity threats.
• Oversee security monitoring technologies (SIEM, SOAR, EDR, IDS/IPS, NDR, DLP, and cloud-native tools) and continuously advance detection and alerting capabilities.
• Define, maintain, and enforce SOC playbooks, workflows, and escalation procedures.
• Partner with IT, DevOps, engineering, and cloud teams to embed security monitoring across infrastructure, applications, and financial platforms.
• Track and report SOC performance metrics, incident trends, and operational risk reduction to senior leadership.

Incident Response Leadership:

• Serve as incident commander during cyber events, directing containment, eradication, and recovery efforts.
• Maintain and test the enterprise incident response plan through tabletop exercises, simulations, and red/blue team exercises.
• Lead forensic analysis, malware investigations, and root-cause assessments to drive remediation and strengthen defenses.
• Act as the communication bridge between technical teams and executives during crises, ensuring clear and timely updates.
• Document incidents, deliver post-incident reports, and incorporate lessons learned into ongoing improvements.
• Provide on-call leadership and support outside normal working hours as required.

 Strategic Contributions:

• Advance the maturity of detection and response programs, aligning with frameworks such as NIST CSF, MITRE ATT&CK, ISO, and CIS Controls.
• Ensure SOC operations comply with financial services regulatory requirements (GLBA, PCI DSS, FFIEC, HIPAA, SOX).
• Mentor, coach, and develop SOC analysts, incident responders, and junior engineers, building a culture of excellence and continuous learning.
• Evaluate emerging security technologies and provide recommendations for the organization’s cyber defense roadmap.
• Serve as a trusted advisor to senior leadership on operational risk, incident readiness, and resilience posture.

Qualifications

• 8+ years of progressive experience in cybersecurity operations, SOC leadership, or incident response.
• 3+ years of experience in a leadership role managing SOC and/or IR teams.
• Proven expertise with SIEM, SOAR, EDR, NDR, IDS/IPS, forensic tools, and malware analysis techniques.
• Demonstrated success in building and leading high-performing security teams.
• Strong knowledge of adversary tactics and threat intelligence frameworks (e.g., MITRE ATT&CK).
• Experience leading enterprise-scale incident response during high-impact events.
• Familiarity with compliance and regulatory requirements for financial institutions (GLBA, PCI DSS, FFIEC, HIPAA, NYDFS).
• Excellent communication skills, with the ability to brief executives and translate technical findings for non-technical stakeholders.
• Preferred certifications: CISSP, CISM, GIAC (GCIA, GCIH, GCFA), OSCP, CCSP, or equivalent.

Education, Experience, and Certifications:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related field.
• 10+ years of experience in cybersecurity engineering and security leadership roles.
• One or more of the following certifications required: CISSP, CCSP, CISM, CEH, GIAC (GSEC, GMON), OSCP/OSCE, CEH, TOGAF, CASP+, etc.
• Experience in the financial services or mortgage industry is a plus.

Reporting Line:

• Reports to: Director, Cybersecurity Services (or equivalent senior leader).
• Collaborates closely with the Office of the CISO, IT lead