Senior Manager, Cyber Threat Detection & Response

The role

You will focus on detection engineering and blue-team operations. This includes designing, writing and tuning detection rules, responding to security alerts, and maintaining security posture across cloud, network and endpoint environments.

What you will do

• Configure, deploy, and manage security tooling including SIEM, XDR, log management, IDS/IPS/NDR, firewalls, endpoint protection, and cloud-security tools
• Triage and investigate alerts through log analysis and event correlation
• Perform vulnerability assessments, threat hunting, risk-based tuning of detection rules, and threat modelling
• Participate in incident response including containment, mitigation, root-cause analysis, and remediation
• Automate security operations using scripts or workflows via Python, PowerShell, Bash, or SOAR integrations
• Collaborate with IT, DevOps, and business stakeholders to embed security best practices
• Maintain and enforce security policies, standards, access controls, and compliance frameworks
• Produce documentation, dashboards, reports, and run-books

Required qualifications

• 5–7+ years of professional experience in cybersecurity engineering / operations
• Hands-on experience in detection, SIEM/XDR, log management, incident response, and security tool administration
• Strong technical knowledge in network security, cloud security (e.g., AWS, Azure, or similar), endpoint security, identity and access management (IAM), firewall/IDS/IPS, and intrusion detection/preven
• Proven ability to author, tune and review detection rules / alerts / log-parsing logic
• Ability to perform advanced log analysis and event correlation
• Familiarity with scripting or automation (e.g., Python, PowerShell, Bash)
• Solid understanding of security frameworks, best practices, and threat-detection methodologies
• Strong analytical, problem-solving, communication, and collaboration skills

Nice to have

• Experience with cloud-native security environments and multi-cloud deployments
• Familiarity with SOAR or security automation/orchestration platforms
• Certifications such as CISSP, CISM, CEH, or other relevant credentials
• Prior experience in a blue team / SOC / detection engineering / incident response role
• Understanding of compliance, regulatory standards, and risk management best practices

About the company

Teneo is the global CEO advisory firm. The firm has more than 1,800 employees located in 45+ offices around the world.