Technical Product Manager

Job Title: Technical Product Manager - SIEM/SOAR & Security Platforms

Location: Research Triangle Park, NC / Remote

Job Type: Full-Time

Experience: 6-8 Years

---

Job Summary

We are seeking a Technical Product Manager with expertise in SIEM, SOAR, Security Telemetry, and Detection Engineering to drive the operational excellence of enterprise security platforms. The ideal candidate will have a strong technical background in cybersecurity, security operations, and platform management, with experience leading cross-functional initiatives involving SOC, engineering, compliance, and product teams. This role focuses on enhancing security monitoring, telemetry quality, detection capabilities, and regulatory compliance while leveraging AI to improve operational efficiency.

---

Required Skills

SIEM & SOAR Platforms

• 6-8 years of experience in Cybersecurity, Security Operations, or Security Platform Management
• Hands-on experience with:
  • SIEM Platforms (Splunk, Microsoft Sentinel, QRadar, Elastic SIEM, etc.)
  • SOAR Platforms
  • Security Monitoring
  • Security Operations

Security Telemetry & Detection Engineering

• Security Log Management
• Telemetry Ingestion
• Log Normalization
• Detection Engineering
• Detection Rules
• Use Case Development
• Threat Detection
• Security Analytics

Query Languages

• SQL
• Splunk SPL
• Elastic DSL
• Log Analytics Queries
• Security Data Analysis

Security Compliance

• SEC Attestation
• Logging Compliance
• Audit Readiness
• Security Governance
• Regulatory Compliance
• Security Standards

Platform Operations

• Platform Performance Management
• Service Availability
• Incident Management
• Root Cause Analysis
• Continuous Improvement
• SLA / SLO Monitoring
• Detection Coverage Metrics

Documentation

• Standard Operating Procedures (SOPs)
• Runbooks
• Technical Documentation
• Operational Procedures

Cross-Functional Leadership

• Product Management
• Engineering Coordination
• SOC Collaboration
• Stakeholder Management
• Vendor Coordination
• Technical Program Leadership

AI & Automation

• AI-enabled Security Operations
• AI-driven Process Automation
• Operational Intelligence
• Security Platform Optimization

---

Key Responsibilities

• Manage the operational lifecycle of SIEM/SOAR platforms, including telemetry ingestion, detection use cases, and platform availability
• Monitor and optimize SIEM/SOAR pipelines for stability, scalability, and performance
• Develop, tune, and manage detection content, rules, and security use cases to improve threat detection capabilities
• Validate security telemetry quality, log normalization, and data integrity across multiple sources
• Define, monitor, and report on service-level metrics including detection coverage, response timelines, and workflow health
• Collaborate with Engineering, Product, SOC, Platform, and Compliance teams to deliver enterprise security capabilities
• Analyze security data using SQL, Splunk SPL, Elastic DSL, and other query languages to troubleshoot issues and answer business questions
• Assess client environments for logging compliance and SEC attestation requirements
• Create and maintain operational runbooks, SOPs, technical documentation, and best practices
• Support technical integration of security platforms for acquisitions and enterprise expansion
• Leverage AI technologies to improve platform operations, security analytics, and operational efficiency

---

Preferred Qualifications

• Experience with Splunk Enterprise Security, Microsoft Sentinel, Elastic Security, QRadar, or similar SIEM platforms
• Experience with SOAR solutions such as Splunk SOAR, Cortex XSOAR, or Microsoft Sentinel Automation
• Knowledge of MITRE ATT&CK, SOC operations, and threat hunting
• Security certifications such as:
  • CISSP
  • GIAC
  • Security+
  • Splunk Certifications
• Experience in enterprise cybersecurity environments and security platform modernization