Overview
In this leadership role, you shape and drive a threat-informed defence capability within a mature cyber security team. You align the program with enterprise goals, expand high-value telemetry and detections, and oversee scalable detection engineering and validation. You lead a team across two locations, balancing production stability with innovation, and leverage AI to increase efficiency. You impact risk posture by turning adversary insights into measurable protection and faster investigations.
Arbeidsvoorwaarden / Benefits
- Annual paid time off and generous leave
- Hybrid working with flexible arrangements and overseas work options
- Industry-leading product discounts (Booking.com wallet credit)
- DEI and inclusive culture
- Adjustment support for disabilities
- Competitive compensation and benefits package
Verantwoordelijkheden
- Shape strategy with leadership and translate it into a risk-based plan for the team
- Expand telemetry and detection coverage where it matters most across crown jewels, identity, cloud, and visibility gaps
- Institutionalize detection and response engineering at scale (code, reviews, CI/CD, validation, maintenance)
- Run a formal adversary-emulation and validation program to surface gaps and close them
- Own and report KPIs (ATT&CK-aligned coverage, detection quality, FP rate, automation impact)
- Leverage AI to accelerate detection, reduce manual toil, and improve investigation efficiency
- Lead and develop people, fostering psychological safety and accountability
- Build cross-functional visibility and partnerships with Enterprise IT, product security, and broader cyber defence teams
Belangrijkste vereisten
- 5+ years in cybersecurity, security engineering, threat research, or detection & response
- 2+ years directly managing engineers or senior specialists
- Breadth across threat hunting/research/adversary emulation and detection engineering/telemetry/SIEM/SOAR/response automation
- Fluency in adversary TTPs, MITRE ATT&CK, and modern detection engineering practices
- Track record of moving initiatives from prototype to owned production capability
- Strong stakeholder communication translating complex work into business impact
- People-first leadership style with empathy and accountability
- empathy
- accountability
- clear communication
- detection-as-code
- telemetry onboarding
- SIEM
Proactive Cyber Defence and Engineering in Amsterdam werkgever: Jobrapido
StarPark is een uitstekende werkgever die je de kans biedt om te werken op diverse evenementen en festivals, waar je in een informele en prettige werksfeer kunt bijdragen aan de veiligheid van bezoekers. Met flexibele werkmogelijkheden en goede begeleiding vanuit het team, stimuleert StarPark persoonlijke groei en ontwikkeling, waardoor je niet alleen waardevolle ervaring opdoet, maar ook de mogelijkheid hebt om door te groeien binnen de organisatie. Wij verwelkomen iedereen, ongeacht achtergrond, en geloven dat jouw talent het belangrijkste is.
