Manager, Detection and Response

Job Posting Title: Manager Detection and Response

Location: U.S. Remote

Pay: starting at 135K DOE+ Benefits

Position Summary:

The Manager Detection & Response is responsible for leading New American Funding’s detection engineering, incident response, security operations center (SOC), and threat hunting functions. This role blends operational leadership with deep technical expertise and serves as the incident commander during critical events.

As both a manager and a hands-on leader, this role directs a team of analysts and engineers to enhance detection capabilities, refine response processes, and collaborate with business and technology stakeholders during high-impact incidents.

Identity Verification checks are in place throughout the Candidate journey to prevent candidate fraud

Security Operations Leadership

• Lead day-to-day operations of the SOC, ensuring rapid detection, triage, and response to cybersecurity threats.
• Oversee security monitoring technologies (SIEM, SOAR, EDR, IDS/IPS, NDR, DLP, and cloud-native tools) and continuously advance detection and alerting capabilities.
• Define, maintain, and enforce SOC playbooks, workflows, and escalation procedures.
• Partner with IT, DevOps, engineering, and cloud teams to embed security monitoring across infrastructure, applications, and financial platforms.
• Track and report SOC performance metrics, incident trends, and operational risk reduction to senior leadership.

Incident Response Leadership:

• Serve as incident commander during cyber events, directing containment, eradication, and recovery efforts.
• Maintain and test the enterprise incident response plan through tabletop exercises, simulations, and red/blue team exercises.
• Lead forensic analysis, malware investigations, and root-cause assessments to drive remediation and strengthen defenses.
• Act as the communication bridge between technical teams and executives during crises, ensuring clear and timely updates.
• Document incidents, deliver post-incident reports, and incorporate lessons learned into ongoing improvements.
• Provide on-call leadership and support outside normal working hours as required.

 Strategic Contributions:

• Advance the maturity of detection and response programs, aligning with frameworks such as NIST CSF, MITRE ATT&CK, ISO, and CIS Controls.
• Ensure SOC operations comply with financial services regulatory requirements (GLBA, PCI DSS, FFIEC, HIPAA, SOX).
• Mentor, coach, and develop SOC analysts, incident responders, and junior engineers, building a culture of excellence and continuous learning.
• Evaluate emerging security technologies and provide recommendations for the organization’s cyber defense roadmap.
• Serve as a trusted advisor to senior leadership on operational risk, incident readiness, and resilience posture.

• 8+ years of progressive experience in cybersecurity operations, SOC leadership, or incident response.
• 3+ years of experience in a leadership role managing SOC and/or IR teams.
• Proven expertise with SIEM, SOAR, EDR, NDR, IDS/IPS, forensic tools, and malware analysis techniques.
• Demonstrated success in building and leading high-performing security teams.
• Strong knowledge of adversary tactics and threat intelligence frameworks (e.g., MITRE ATT&CK).
• Experience leading enterprise-scale incident response during high-impact events.
• Familiarity with compliance and regulatory requirements for financial institutions (GLBA, PCI DSS, FFIEC, HIPAA, NYDFS).
• Excellent communication skills, with the ability to brief executives and translate technical findings for non-technical stakeholders.
• Preferred certifications: CISSP, CISM, GIAC (GCIA, GCIH, GCFA), OSCP, CCSP, or equivalent.

Education, Experience, and Certifications:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related field.
• 10+ years of experience in cybersecurity engineering and security leadership roles.
• One or more of the following certifications required: CISSP, CCSP, CISM, CEH, GIAC (GSEC, GMON), OSCP/OSCE, CEH, TOGAF, CASP+, etc.
• Experience in the financial services or mortgage industry is a plus.

Reporting Line:

• Reports to: Director, Cybersecurity Services (or equivalent senior leader).
• Collaborates closely with the Office of the CISO, IT leadership, risk management, and compliance teams.

Work Authorization:

Must be able to verify identity and employment eligibility to work in the U.S.

Other Duties:

This job profile is not intended to be an all-inclusive list of job duties and responsibilities, as one may perform additional related duties as assigned to meet the needs of the organization.

Physical Demands:

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. Must be able to lift up to ten pounds. Primary functions require sufficient physical ability and mobility to work in an office setting; to stand or sit for prolonged periods of time; to occasionally stoop, bend, kneel, crouch, reach, and twist; to lift, carry, push, and/or pull light to moderate amounts of weight; to operate office equipment requiring repetitive hand movement and fine coordination including use of a keyboard; and to verbally communicate to exchange information.

Vision:

See in the normal visual range with or without correction.

Hearing:

Hear in the normal audio range with or without correction.

[EOE/M/F/D/V. Drug-free workplace.]

#LI-JS3

#LI-REMOTE