Senior Manager-Platform Engineering

Job Statement:

NopalCyber makes cybersecurity manageable, affordable, reliable, and powerful for companies that need to be resilient and compliant. Managed extended detection and response (MXDR), attack surface management (ASM), breach and attack simulation (BAS), and advisory services fortify your cybersecurity across both offense and defense. AI-driven intelligence in our Nopal360° platform, our NopalGo mobile app, and our proprietary Cyber Intelligence Quotient (CIQ) lets anyone quantify, track, and visualize their cybersecurity posture in real-time. Our service packages, which are each tailored to a client's needs and budget, and external threat analysis, which provides critical intelligence at no cost, help to democratize cybersecurity by making enterprise-grade defenses and security operations available to organizations of all sizes. Nopal Cyber lowers the barrier to entry while raising the bar for security and service.

As the Senior Manager – Platform Engineering, you will be part of high-performing team in the design, deployment, and continuous improvement of advanced threat detection capabilities across global enterprise environments. This role demands both strategic vision and hands-on technical expertise to defend complex hybrid infrastructures against evolving cyber threats. You will be responsible for shaping detection strategy, ensuring operational excellence, and driving innovation in how threats are identified and neutralized.

Key Responsibilities

Strategic Leadership & Vision

• Define and own the enterprise-wide threat detection strategy aligned with organizational security objectives and evolving threat landscapes.
• Partner with executive leadership to set detection performance KPIs and ensure measurable impact on organizational resilience.
• Serve as the senior technical authority for detection architecture, threat coverage, and operational readiness.

Advanced Threat Detection & Engineering

• Lead the design, development, and deployment of high-fidelity, scalable threat detection mechanisms across on-premises, cloud (AWS, Azure, GCP), and SaaS environments.
• Architect and optimize SIEM/SOAR ecosystems, integrating diverse data sources to maximize visibility and response speed.
• Translate threat intelligence and TTPs (MITRE ATT&CK, Cyber Kill Chain) into actionable detection rules and playbooks.
• Drive automation initiatives to reduce MTTD (Mean Time to Detect) and enhance analyst efficiency.

Operational Excellence

• Lead cross-functional collaboration with Threat Hunting, Incident Response, and Security Operations to ensure a unified defense posture.
• Oversee detection content lifecycle — creation, validation, tuning — to minimize false positives while maintaining high sensitivity.
• Guide large-scale client onboarding to detection platforms, ensuring seamless data integration and operational alignment.
• Establish and maintain detection health monitoring and reporting frameworks for continuous improvement.

Team & Stakeholder Management

• Mentor and develop senior engineers and analysts, building a pipeline of next-generation detection experts.
• Act as the senior liaison with clients, internal executives, and technology partners on detection and response capabilities.
• Drive security awareness and detection-readiness initiatives across technical and non-technical teams.

Qualifications & Experience

• Bachelor's degree in Computer Science, Information Security, or related discipline (Master's preferred).
• 15+ years in cybersecurity, with at least 5 years leading threat detection/engineering teams in complex enterprise environments.
• Proven expertise in SIEM platforms (Splunk, ELK/Security Onion, IBM QRadar, Securonix, Wazuh, Azure Sentinel) including advanced query design, dashboarding, and data onboarding.
• In-depth knowledge of network infrastructure and security controls (Firewalls, EDR/XDR, Email Security, Proxy, DLP, IDS/IPS, CSPM, SOAR, WAF).
• Strong grasp of adversary TTPs, MITRE ATT&CK, Cyber Kill Chain, and emerging attack vectors.
• Demonstrated success in cloud-native security monitoring and detection.
• Industry-recognized certifications highly preferred: OSCP, GIAC (GCIH, GCIA), CISSP, GCTI, GCDA or equivalent.
• Exceptional communication, leadership, and client engagement skills.