Program Manager

Senior Program Manager For Detection Engineering

Must have technical/functional skills required skills & experience:

• 7+ years in program or project management, with at least 3+ years embedded within or directly supporting cybersecurity, SOC, or detection engineering functions.

Detection Engineering Lifecycle:

• Strong understanding of the detection engineering lifecycle, including use case development, SIEM rule authoring, alert tuning, and detection validation.

• Familiarity with detection-as-code practices and platforms (e.g., Splunk, Microsoft Sentinel, Chronicle, Elastic SIEM).

• Working knowledge of MITRE ATT&CK framework and its application to detection coverage mapping and gap analysis.

AI & Emerging Threat Domains:

• Experience supporting or managing security programs that address AI/ML system monitoring, GenAI risk, or emerging technology threat vectors.

• Familiarity with AI-specific threat models and the unique detection challenges posed by LLMs, AI pipelines, and model serving infrastructure.

Program Management:

• Proven ability to manage complex, multi-workstream programs across cross-functional teams in matrixed organizations.

• Strong command of program management methodologies (Agile, SAFe, Waterfall, or hybrid) and tooling (e.g., Jira, Confluence, ServiceNow, Smartsheet).

• Demonstrated experience managing senior stakeholder relationships and communicating program status at executive level.

Cross-Functional Collaboration:

• Track record of successfully coordinating across diverse teams including security engineering, data/platform engineering, threat intelligence, and business stakeholders.

• Strong facilitation skills for workshops, planning sessions, and working group governance.

Soft Skills:

• Exceptional written and verbal communication skills with the ability to translate complex technical concepts for non-technical audiences.

• Strong organizational skills with a detail-oriented approach to risk, dependency, and issue management.

• Ability to operate effectively in ambiguous, fast-moving environments with competing priorities.

Certifications (Preferred but not required): PMP, PgMP, SAFe Agilist, CISSP (Associate), or equivalent cybersecurity or program management credentials.

Education: A Bachelor's degree in Computer Science, Information Security, Business, or a related field is required, or equivalent professional experience.

Skillsets Required: BFT CyberTech: BRD process management. Strong program mgmt skills for detecting engineering lifecycle management for SOC use cases.

Roles & Responsibilities:

Program & Product Management:

This role requires a senior Program Manager with deep experience leading detection engineering lifecycle management for Security Operations Center (SOC) environments, with a specific focus on enabling and scaling detection use cases for monitoring AI systems. The consultant will serve as the connective tissue across cross-functional teams — spanning detection engineers, threat intelligence analysts, data engineers, platform teams, and business stakeholders — driving structured program delivery from detection conception through to production deployment and continuous improvement.

Key Responsibilities:

Detection Engineering Program Management:

• Own and manage the end-to-end detection engineering lifecycle — from use case ideation, requirements gathering, and prioritization through to development, validation, deployment, and tuning.

• Maintain and manage a structured detection use case backlog, ensuring alignment with SOC operational priorities and emerging threat landscapes.

• Define and enforce program governance standards, including intake processes, milestone tracking, and delivery cadences across detection engineering workstreams.

• Produce and communicate program status reports, risk registers, and delivery roadmaps for senior stakeholders and leadership.

AI System Monitoring Use Cases:

• Drive the identification, scoping, and delivery of detection use cases specifically targeting AI system behaviors, including model abuse, prompt injection, data exfiltration via AI interfaces, and anomalous AI pipeline activity.

• Collaborate with AI/ML engineering, data science, and security teams to translate AI-specific threat models into actionable detection requirements.

• Track the maturity and coverage of AI-focused detections, ensuring continuous improvement against evolving AI threat vectors.

Cross-Functional Stakeholder Management:

• Act as the primary program interface between detection engineering teams, SOC operations, threat intelligence, data platform, cloud engineering, and business stakeholders.

• Facilitate and lead cross-functional planning sessions, working groups, and steering committees to align priorities and resolve blockers.

• Manage dependencies, risks, and interdependencies across multiple concurrent detection engineering workstreams and teams.

• Build and maintain strong stakeholder relationships to ensure program transparency, buy-in, and accountability.

Process & Operational Excellence:

• Design and implement scalable program management frameworks, workflows, and tooling to support detection engineering at enterprise scale.

• Drive adoption of structured detection engineering methodologies (e.g., detection-as-code, use case tiering, coverage mapping to MITRE ATT&CK).

• Establish and track KPIs and OKRs for detection engineering program health, delivery velocity, and SOC impact.

• Continuously identify and implement process improvements to reduce cycle time and improve detection quality.

Documentation & Reporting:

• Maintain comprehensive program documentation including use case catalogues, decision logs, RACI matrices, and delivery plans.

• Develop executive-level reporting and narrative updates to communicate program progress, risks, and strategic value.

Working knowledge of MITRE ATT&CK framework and its application to detection coverage mapping and gap analysis.

Salary Range: $90,000 to $115,000 per year

Location: Irving, TX