Senior Manager-Platform Engineering

Job Statement:

NopalCyber makes cybersecurity manageable, affordable, reliable, and powerful for companies that need to be resilient and compliant. Managed extended detection and response (MXDR), attack surface management (ASM), breach and attack simulation (BAS), and advisory services fortify your cybersecurity across both offense and defense. AI-driven intelligence in our Nopal360° platform, our NopalGo mobile app, and our proprietary Cyber Intelligence Quotient (CIQ) lets anyone quantify, track, and visualize their cybersecurity posture in real-time. Our service packages, which are each tailored to a client's needs and budget, and external threat analysis, which provides critical intelligence at no cost, help to democratize cybersecurity by making enterprise-grade defenses and security operations available to organizations of all sizes. Nopal Cyber lowers the barrier to entry while raising the bar for security and service.

As the
Senior Manager – Platform Engineering
, you will be part of high-performing team in the design, deployment, and continuous improvement of advanced threat detection capabilities across global enterprise environments. This role demands both
strategic vision
and
hands-on technical expertise
to defend complex hybrid infrastructures against evolving cyber threats. You will be responsible for
shaping detection strategy, ensuring operational excellence, and driving innovation
in how threats are identified and neutralized.

Key Responsibilities

Strategic Leadership & Vision

• Define and own the enterprise-wide
  threat detection strategy
  aligned with organizational security objectives and evolving threat landscapes.
• Partner with executive leadership to set detection performance KPIs and ensure measurable impact on organizational resilience.
• Serve as the senior technical authority for
  detection architecture, threat coverage, and operational readiness
  .

Advanced Threat Detection & Engineering

• Lead the design, development, and deployment of
  high-fidelity, scalable threat detection mechanisms
  across on-premises, cloud (AWS, Azure, GCP), and SaaS environments.
• Architect and optimize
  SIEM/SOAR ecosystems
  , integrating diverse data sources to maximize visibility and response speed.
• Translate
  threat intelligence and TTPs (MITRE ATT&CK, Cyber Kill Chain)
  into actionable detection rules and playbooks.
• Drive automation initiatives to reduce MTTD (Mean Time to Detect) and enhance analyst efficiency.

Operational Excellence

• Lead cross-functional collaboration with Threat Hunting, Incident Response, and Security Operations to ensure a unified defense posture.
• Oversee detection content lifecycle — creation, validation, tuning — to minimize false positives while maintaining high sensitivity.
• Guide large-scale client onboarding to detection platforms, ensuring seamless data integration and operational alignment.
• Establish and maintain
  detection health monitoring
  and reporting frameworks for continuous improvement.

Team & Stakeholder Management

• Mentor and develop senior engineers and analysts, building a pipeline of
  next-generation detection experts
  .
• Act as the senior liaison with clients, internal executives, and technology partners on detection and response capabilities.
• Drive security awareness and detection-readiness initiatives across technical and non-technical teams.

Qualifications & Experience

• Bachelor's degree in Computer Science, Information Security, or related discipline (Master's preferred).
• 15+ years
  in cybersecurity, with at least
  5 years leading threat detection/engineering teams
  in complex enterprise environments.
• Proven expertise in
  SIEM platforms
  (Splunk, ELK/Security Onion, IBM QRadar, Securonix, Wazuh, Azure Sentinel) including advanced query design, dashboarding, and data onboarding.
• In-depth knowledge of
  network infrastructure and security controls
  (Firewalls, EDR/XDR, Email Security, Proxy, DLP, IDS/IPS, CSPM, SOAR, WAF).
• Strong grasp of adversary TTPs,
  MITRE ATT&CK
  , Cyber Kill Chain, and emerging attack vectors.
• Demonstrated success in
  cloud-native security monitoring and detection
  .
• Industry-recognized certifications highly preferred:
  OSCP, GIAC (GCIH, GCIA), CISSP, GCTI, GCDA
  or equivalent.
• Exceptional communication, leadership, and client engagement skills.