Source Job

United States Unlimited PTO

  • Lead the Security Detection & Response team, owning incident response, detection engineering, and automation.
  • Oversee security observability, detection strategy, and AI-assisted workflows to improve speed and reliability.
  • Build and retain a high-performing remote team, collaborating across Engineering, IT, and other departments.

Incident Response Python SIEM People Management

20 jobs similar to Engineering Manager, Security Detection & Response

Jobs ranked by similarity.

United States

  • Lead the team responsible for detecting, investigating, responding to, and learning from security events
  • Manage and coach a team of engineers while remaining close to technical work such as detection design, alert tuning, and incident response
  • Manage relationships with security operations vendors and work closely with Security, Engineering, IT, and Compliance to protect patient and provider data

Rula is a remote-first company dedicated to making mental healthcare work for everyone. We believe mental health is as important as physical health and aim to create a world where it is embraced as an integral part of well-being.

$122,500–$165,000/yr
US

  • Proactively identify and respond to emerging security threats and incidents.
  • Develop detection techniques and manage core security tooling such as SIEM and orchestration platforms.
  • Collaborate across teams to support security projects and participate in on-call rotations.

Circle is a leading internet financial platform company building infrastructure for digital assets, stablecoins, and blockchain. They have a flexible work environment with values of high integrity and multistakeholder collaboration.

Germany 4w PTO

  • Lead and oversee security operations, including SOC activities, detection engineering, incident response, and exposure management.
  • Build, mentor, and develop the Cyber Defense team through hiring, coaching, and talent retention.
  • Continuously improve detection capabilities and response procedures using threat intelligence and lessons learned.

Jobgether is an AI-powered job matching platform that connects candidates with hiring companies. It processes applications and shares shortlists with employers for final decisions.

India

  • Lead daily MDR operations and guide security investigations.
  • Coach and mentor security analysts to improve performance.
  • Collaborate with engineering teams to enhance detection capabilities.

This company provides advanced Managed Detection and Response (MDR) services to protect organizations worldwide. It fosters a collaborative, inclusive culture with remote-first work and continuous learning opportunities.

$180,000–$215,000/yr
US Unlimited PTO

  • Lead the direction for detecting and responding to AI threats using creative solutions.
  • Collaborate cross-functionally with engineering, IT, legal, and product teams.
  • Manage globally distributed security teams with a focus on data and execution.

Gainsight is the AI-powered retention engine behind the world's most customer-centric companies. With over 2,000 customers and a culture focused on collaboration and human-first values, we offer stability and support for our team.

$175,000–$217,000/yr
US Unlimited PTO

  • Build into the product by writing investigation flows, building integrations with security tools, and fixing bugs.
  • Evolve the investigation logic and pipelines to handle new classes of security alerts, balancing accuracy, performance, and maintainability.
  • Contribute directly to the Python codebase while influencing architectural decisions and long-term product strategy.

Dropzone AI scales cybersecurity beyond human limits by augmenting security engineers with AI specialists. The venture-backed company is disrupting the $200B+ cybersecurity market and has a team with deep experience in cybersecurity, AI/ML, and SaaS.

Netherlands

  • Design, implement, and optimize security monitoring, incident response, and detection capabilities across modern cloud and infrastructure ecosystems.
  • Build and maintain SIEM and log management capabilities, ensuring centralized log collection, normalization, and retention policies.
  • Automate operational security processes such as alert enrichment, incident notifications, and response orchestration.

Jobgether is an AI-powered job matching platform that connects candidates with hiring companies. They operate as a partner company managing applications and next steps, fostering a collaborative, transparent, and innovation-driven culture with a focus on professional growth and well-being.

Europe

  • Respond to security incidents as part of a distributed 24x7 on-call schedule, triaging and containing events.
  • Conduct security investigations and forensics across data sources to determine event timelines and impact.
  • Build automations leveraging AI and agentic platforms to expedite incident response and scale team impact.

Databricks is the data and AI company, providing a unified platform for data, analytics, and AI. More than 10,000 organizations worldwide, including over 50% of the Fortune 500, rely on Databricks, which fosters a diverse and inclusive culture.

US

  • Lead the development, rollout, and operations of security operations tools and services such as SIEM, EDR, NDR, email, and cloud, building detection rules, automated playbooks, and integrations.
  • Apply a detections-as-code approach with version-controlled, peer-reviewed detection rules tuned against alert quality metrics.
  • Architect and implement security engineering capabilities including endpoint security, data loss prevention, email security, network security, SIEM enhancements, detection engineering, and security automation.

Delinea is a pioneer in securing human and machine identities through intelligent, centralized authorization, empowering organizations to govern interactions across the modern enterprise. It is a global team with a culture of innovation, respect, and fairness, backed by strategic investment from TPG.

Global

  • Own, administer, and optimize SIEM and EDR platforms, including detection content and automation workflows.
  • Design SOAR playbooks and integrations across security tools to streamline triage, enrichment, and containment.
  • Investigate security events, conduct threat hunts, and support incident response alongside CSIRT Analysts.

Vultr provides high-performance cloud infrastructure for enterprises and AI innovators worldwide, with 33 global data centers. As the world's largest privately-held cloud infrastructure company, Vultr has grown significantly and values inclusion, offering comprehensive benefits and professional development.

Global Unlimited PTO

  • Lead a distributed engineering organization of nine teams, setting the vision and roadmap for proprietary scanners, AI-driven detection, and agentic remediation.
  • Drive architectural decisions for security detection engines and scalable scanning infrastructure while partnering with product management to prioritize customer needs.
  • Own delivery of security capabilities and represent the Security Factory in cross-functional planning, executive reviews, and customer conversations.

GitLab provides an intelligent orchestration platform for DevSecOps, enabling organizations to improve developer productivity and reduce security risks. With over 50 million users and trust from more than 50% of the Fortune 100, GitLab fosters a high-performance, AI-driven culture where all team members are expected to integrate AI into their workflows.

Global

  • Lead the Security Operations Team to protect global IT infrastructure, ensuring system confidentiality, integrity, and availability.
  • Oversee incident response, vulnerability management, and continuous security posture improvements across the organization.
  • Collaborate with IT, Engineering, and Compliance teams to embed security into every layer of the business.

Unit4 is a cloud ERP company redefining enterprise resource planning for mid-market people-centric organizations. With over 40 years of heritage, it fosters a people-first culture with a high-performance team and a focus on employee empowerment.

US 4w PTO

  • Work cross-functionally to design, build, and operate solutions that automate and improve security capabilities.
  • Lead incident response efforts, analyze security trends, and refine security documentation like policies and standards.
  • Mentor junior engineers and coach team members to drive security outcomes across the organization.

Aledade is a public benefit corporation that empowers independent primary care practices through value-based care, helping them deliver better patient outcomes while thriving financially. Founded in 2014, the company has grown to become the largest network of independent primary care in the US, fostering a collaborative, inclusive, and remote-first culture.

$135,481–$182,160/yr
US

  • Monitor security events and provide technical analysis on alerts.
  • Lead information security incidents and employee investigations, developing response strategies.
  • Deliver security guidance and coordinate building services to support security operations.

Samsara is the pioneer of the Connected Operations Cloud, helping organizations that depend on physical operations harness IoT data to improve safety, efficiency, and sustainability. As a recently public company with a culture that encourages rapid career development, they support a flexible, employee-led remote model.

UK

  • Lead and support the response to all security events and incidents across Twilio's global infrastructure, services, and applications.
  • Work cross-collaboratively to solve challenges related to a broad spectrum of threat actors and improve security posture.
  • Own the security incident lifecycle, participate in on-call rotation, and conduct post-incident betterments.

Twilio shapes the future of communications with innovative solutions for hundreds of thousands of businesses, empowering millions of developers worldwide. The company embraces a remote-first work culture and a strong culture of connection and global inclusion, fostering a vibrant and diverse team.

Global

  • Define, build, and scale a world-class Security Operations function within a globally distributed technology environment.
  • Lead incident response, threat detection, and security engineering practices across the organization.
  • Collaborate with engineering and leadership teams to embed security best practices into development and operations workflows.

Jobgether is an AI-powered job matching platform that connects candidates with hiring companies globally. It is a small to medium-sized company with a distributed team, focusing on innovation and automation in recruitment.

US

  • Lead a team designing, delivering, and operating enterprise cyber services across NBCU's infrastructure.
  • Drive secure-by-design engineering and operational excellence for network, endpoint, cloud, and SIEM security.
  • Partner with stakeholders to reduce risk while enabling innovation and speed.

NBCUniversal is a leading media and entertainment company that creates and distributes content across film, television, and streaming. As a subsidiary of Comcast Corporation, the company operates a diverse portfolio of brands and has a global workforce committed to inclusive culture and community impact.

$170,000–$170,000/yr
US

  • Oversee global 24/7 SOC operations monitoring ~3 million endpoints, including incident response and performance metrics.
  • Recruit, mentor, and train SOC analysts, develop career paths, and deliver ongoing training.
  • Identify and implement automation opportunities to reduce manual workload and improve efficiency.

Kaseya is the leading provider of AI-powered IT management and cybersecurity software, serving Managed Service Providers and internal IT organizations worldwide. Backed by Insight Partners, Kaseya supports customers in over 20 countries and manages over 15 million endpoints; the culture is centered around innovation, accountability, and results.

$100,000–$165,000/yr
US Unlimited PTO

  • Lead security operations including vulnerability management, incident response, and SIEM platform maturity.
  • Administer Microsoft security tools (Defender, Purview, Entra) and support compliance frameworks like SOC 2 and HITRUST.
  • Drive risk reduction through security awareness, risky user remediation, and cross-functional collaboration.

Sequel develops next-generation drug-delivery advancements, starting with the twiist Automated Insulin Delivery System for diabetes management. It is headquartered in New Hampshire and fosters a culture of hard work, fun, and support.

Global

  • Own abuse detection and signal triage, monitoring signals and triaging cases end-to-end.
  • Lead incident response and remediation for active abuse incidents, coordinating with platform teams.
  • Build detection logic and automation to reduce manual toil and improve response speed.

Supabase is the Postgres development platform, providing a complete backend solution including Database, Auth, Storage, Edge Functions, Realtime, and Vector Search. The company has 280+ team members across 55+ countries, operates fully remote with an async-first culture, and is open-source-first.