🛠 Tech Stack

💼 About This Role

You'll lead the operational and strategic direction of security incident response at Contentful, building detection and response capabilities across cloud-native environments. You'll drive cross-functional incident response and continuous improvement of threat detection, while remaining hands-on with day-to-day activities.

🎯 What You'll Do

• Develop and mentor a team of security analysts and engineers
• Lead detection engineering, creating and maintaining threat detections
• Conduct large-scale incident response and post-incident analysis
• Enhance tooling and automation to improve detection and response
• Define metrics and roadmaps to measure program effectiveness

📋 Requirements

• 6+ years in security operations including alert triage and investigation
• 4+ years conducting large-scale incident response with 2+ years leading efforts
• 2+ years managing people and security operations teams
• Expertise in attacker techniques in cloud-native and traditional environments
• Hands-on experience with AWS security services and Splunk

✨ Nice to Have

• Experience with detection engineering and modern security practices
• Familiarity with AI/ML in security operations
• Relevant security certifications (e.g., CISSP, GCIH)

🎁 Benefits & Perks

• 🏖️ Unlimited PTO
• 💰 Competitive compensation and equity
• 🏥 Comprehensive health, dental, and vision insurance
• 📈 401(k) matching
• 📚 Professional development budget

📨 Hiring Process

Estimated timeline: 2-4 weeks · AI estimate

1. 1Recruiter Phone Screen· 30 min
2. 2Hiring Manager Interview· 45 min
3. 3Technical Panel Interview· 60 min