🛠 Tech Stack

💼 About This Role

You'll lead the Threat Detection and Response program at Contentful, shaping team strategy and operational direction. You'll remain hands-on with detection engineering and incident response while building a high-performing team. This role combines technical leadership with direct response work in a cloud-native environment.

🎯 What You'll Do

• Develop and coach a team of security engineers.
• Perform daily alert investigation and incident response.
• Lead detection engineering, including creating and maintaining threat detections.
• Drive continuous improvement of processes, tooling, and documentation.

📋 Requirements

• 6+ years in security operations including alert triage and investigation.
• 4+ years conducting large-scale incident response with 2+ years leading.
• 2+ years managing people and security operations teams.
• Expertise in attacker techniques in cloud-native and traditional environments.

✨ Nice to Have

• Experience with AWS audit and security services.
• Familiarity with Splunk data onboarding and administration.
• Practical experience with cross-platform investigations (Mac, Windows, Linux).

🎁 Benefits & Perks

• 🏖️ Unlimited PTO
• 💰 Competitive equity
• 🏥 Health, dental, and vision insurance
• 📚 Learning and development budget
• 💻 Remote work flexibility

📨 Hiring Process

Estimated timeline: 2-4 weeks · AI estimate

1. 1Recruiter Screen· 30 min
2. 2Technical Interview· 60 min
3. 3Hiring Manager Interview· 60 min