Detection & Response Engineering Manager, Expel
€93.9-136.2k
+ Bonus + Equity
Cyber security threat detection & management
Open for applications
Cyber security threat detection & management
501-1000 employees
Open for applications
€93.9-136.2k
+ Bonus + Equity
501-1000 employees
Company mission
Expel is on a mission to make security easy to understand, easy to use, and easy to continuously improve.
Role
Who you are
- Expertise in writing efficient and effective detections for EDRs, ideally at an MDR,a service provider, or as part of a security product’s research team
- Deep understanding of attacker behavior, mapping that behavior to MITRE ATT&CK, building coverage around that behavior, and measuring that coverage at scale
- Experience using response automation to improve detection efficacy
- Familiarity with a range of detection and response tools including but not limited to EDR, NSM, EUBA, SIEM, and cloud detection and response products
- Proficient in Python or Golang programming languages
- Understanding of various operating systems and cloud service platforms
- The ability to analyze event and systems logs, perform forensic analysis, analyze malware, and other incident response related data, as needed
- Knowledge of attack surfaces and corresponding attacker tactics, techniques and procedures
- Comfortable with enterprise security architecture, detection, and response
- Ability to identify relevant data sources, normalize them across toolsets, and work with detection engines to drive effective correlation, automation and orchestration
- Education and Experience
- Extensive experience in threat detection and incident response within the context of a managed service, incident response consulting organization, or for a security product’s research team
- Experience mentoring or managing security analysts, researchers, engineers, or data scientists
- Bachelor’s degree or compelling story
- 5+ years of related professional experience
What the job involves
- Improve and maintain the detection and response strategy of Expel’s Workbench platform in order to meet the scale of our growing customer base
- Grow a team of skilled detection engineers with deep EDR detection writing experience
- Lead your team to grow a sustainable model for continuously adding content to Expel’s product
- Maintain and evolve a detection and response strategy that meets the needs of all of our customers, in terms of both coverage and efficiency
- Consistently develop and maintain a deep understanding of adversary behavior, tools, and techniques to drive forward new approaches to detection and response
- Continuously provide feedback and coaching to inspire a high-performing team of detection and response engineers
- Collaborate with sister teams, UX, product management, and senior leadership
- Shape how the security industry thinks about detection and response at scale by creating new and novel approaches for SOC analysts investigating and responding to alerts in a queue
Our take
As ransomware and hacking threats rise, identifying and resolving breaches in security must be done quickly. Lack of transparency in cyber-security makes it difficult for engineers to detect, understand, and fix the issues as fast as possible. Expel is aiming to redefine what a security operations center and managed detection service looks like in the modern age.
Though the company faces competition from the vast number of cybersecurity platforms, Expel positions itself as a viable alternative to the service delivery model of managed security service providers (MSSPs) by offering a comprehensive management platform that connects to its customers’ tech remotely through APIs, providing fast detection and clear solutions.
Having reached unicorn status, the company is establishing more of a presence in the European and Asia-Pacific markets, capturing business in Canada, the United Kingdom, Australia and Singapore. Its most recent funding will be used to accelerate sustainable growth and continue its international expansion, as well as push forward with go-to-market initiatives.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 6 rounds)
Oct 2022
$31m
SERIES E
Nov 2021
$140.3m
SERIES E
Total funding: $288.8m
Company benefits
- Flexible work hours and locations
- Unlimited time off - includes vacation, personal days, and an annual company-wide restorative day
- 24 weeks parental leave when you, your spouse or your domestic partner gives birth to a child, adopts a child or becomes a foster parent (first 12 weeks paid)
- Military leave
- Paid annual conference - we reimburse you up to $2,500 to attend at least one conference every year that helps you move your career forward
- One month sabbatical after hitting your 5 year anniversary
- Zero-meetings week each quarter - where all Expletives are challenged to reduce the number of internal meetings on their calendar all the way to zero
- Medical insurance through the Cigna Open Access Plus HRA plan
- Dental & vision insurance through Guardian
- Team touchdowns - Expel Teams are encouraged to come together quarterly for planning, for connecting, for energizing and maybe a little fun
- Fitness stipend
- Cell phone stipend
- Employee Assistance Program
- Telemedicine (Cigna’s Telehealth Connection)
- Access to the popular mental health platforms, Ginger and Talkspace
- BenefitHub - a web portal where Expel employees can enjoy discounts, cash back rewards and perks on thousands of brands in a variety of categories!
- Retirement 401(k) account provided by Principal
- Health Reimbursement Arrangement (Cigna)
- Flexible Spending Accounts
- Student loan refinancing
Company HQ
Herndon, VA
Articles
Leadership
Dave Merkel
(CEO)Previous CTO of both FireEye and Mandiant (also VP, Products and Threat Management Services). Previously worked as the Senior Technical Director at America Online and for the US Air Force as an Assistant Chief of Intrusion Invasions.
Justin Bajko
(VP of Strategy & Business Development)Previous Managing Director (MCIRT Operations) at Mandiant and Senior Manager of Global Security Analysis at Symantec. Previously worked as a Network Administrator at Clinical Trial Management Services, and was a Network and Systems Administrator at MiniFibers.
Yanek Korff
(Chief of Staff)Previous COO at Expel. Current Board Member at ThreatSwitch and Investor at Berg Capital Group. Previous Member of the Technical Advisory Board at Ntrepid Corp and CP an CTO at FireEye.
Share this job
View 4 more jobs at Expel