Manager, Cyber Risk Management - Cyber Defense Engineering & AI

Job Type: Full-Time

Job Location: Remote

Our client is seeking a Manager, Cyber Risk Management to lead the engineering and continued evolution of enterprise cyber defense capabilities. This is a highly technical leadership role focused on building the platforms, architecture, data, analytics, automation, and AI capabilities that enable modern threat detection and response.

The ideal candidate is not simply a SOC operations leader. We are looking for a cybersecurity engineering leader who understands how to architect, implement, integrate, and automate security technologies across SIEM, SOAR, EDR, NDR, cloud, endpoint, and on-premises environments — and who can apply AI/ML to fundamentally improve how a security organization detects, investigates, and responds to threats.

You will lead a team of approximately six technical professionals and own the strategy and roadmap for cyber defense engineering capabilities.

What You'll Do

• Lead and develop a team responsible for cyber defense platforms, detection engineering, security analytics, automation, and security engineering.
• Define and execute the technology roadmap for modern, scalable, and resilient cyber threat management capabilities.
• Architect and implement solutions across SIEM, SOAR, EDR, NDR, IPS, cloud security, endpoint security, and security analytics platforms.
• Drive the evolution of security operations through automation, orchestration, AI, and machine learning.
• Identify opportunities to integrate AI/ML into the cyber defense architecture, including threat detection, investigation, triage, analytics, response, and security automation.
• Develop capabilities that move beyond simply using AI tools toward integrating AI into the underlying security infrastructure, data, platforms, and workflows.
• Evaluate and implement agentic and deterministic automation to improve investigation and response capabilities.
• Build and improve security data and analytics capabilities that enable high-quality threat detection and actionable intelligence.
• Partner with Incident Response, Security Operations, Enterprise Architecture, Cloud, Infrastructure, and other technology teams to design and implement security capabilities.
• Support cyber threat investigations, threat hunting, forensic analysis, and incident response through engineering and platform capabilities.
• Ensure security platforms are scalable and resilient across Azure/cloud, on-premises infrastructure, and endpoint environments.
• Use Python and other scripting/automation technologies to develop security engineering and automation capabilities.
• Translate cybersecurity strategy and business risk objectives into actionable engineering roadmaps.
• Establish metrics and performance indicators to measure the effectiveness of cyber defense capabilities and identify opportunities for continuous improvement.
• Mentor engineers and develop expertise in emerging cybersecurity technologies, AI-enabled defense, automation, and modern threat detection.
• Evaluate emerging technologies and determine where AI, ML, automation, and orchestration can provide measurable improvements to cyber defense.

What We're Looking For

• 8+ years of progressive experience in cybersecurity, cyber defense, security engineering, cyber risk management, or related disciplines.
• At least 1 year of technical leadership or people management experience; 3+ years of leadership experience preferred.
• Strong background in cybersecurity engineering and security platform architecture.
• Experience leading or managing technical teams, ideally including a team of approximately 5–10 engineers.
• Deep experience with one or more enterprise security platforms such as:
  • SIEM
  • SOAR
  • EDR/XDR
  • NDR
  • IPS
  • Security analytics platforms
• Strong understanding of detection engineering, threat detection, security automation, orchestration, and incident response.
• Experience with security investigations, threat analysis, threat hunting, and/or digital forensics.
• Strong experience with Azure and cloud security environments, with an understanding of hybrid/on-premises security architecture.
• Hands-on experience with Python, scripting, or security automation development.
• Experience designing and implementing security architectures rather than simply administering or consuming security products.

AI / Machine Learning Experience

A critical component of this position is the ability to understand how AI and machine learning can be engineered into a cyber defense organization.

We are particularly interested in candidates who have:

• Designed or implemented AI/ML-driven cybersecurity capabilities.
• Integrated AI/ML into SIEM, SOAR, security analytics, detection, investigation, or response workflows.
• Used AI to improve threat detection, investigation, alert triage, threat intelligence, or automated response.
• Built or integrated agentic AI, LLM, or GenAI capabilities into security platforms or workflows.
• Developed architectures for incorporating AI into security data and telemetry pipelines.
• Automated previously manual security investigation or response processes using AI and/or machine learning.
• Evaluated how AI can improve the SOC infrastructure, security platforms, data, detection engineering, and response capabilities.
• Worked across cloud, on-premises, and endpoint environments to implement modern security automation.

The distinction is important: We are looking for someone who has helped build, architect, integrate, or engineer AI-enabled cybersecurity capabilities, not someone whose primary experience is simply using AI-powered security products.

Leadership & Strategy

The successful candidate will be able to move between technical architecture and strategic leadership.

You should be comfortable:

• Leading a team of cybersecurity engineers.
• Developing multi-year technology roadmaps.
• Evaluating emerging security and AI technologies.
• Translating business risk into technical capabilities.
• Working with senior security and technology leadership.
• Driving transformation across people, processes, data, and technology.
• Establishing measurable outcomes for security engineering initiatives.
• Building a culture of engineering, innovation, automation, and continuous improvement.