Must Have Technical/Functional Skills

Required Skills & Experience
• 7+ years in program or project management, with at least 3+ years embedded within or directly supporting cybersecurity, SOC, or detection engineering functions.

Detection Engineering Lifecycle:
• Strong understanding of the detection engineering lifecycle, including use case development, SIEM rule authoring, alert tuning, and detection validation.
• Familiarity with detection-as-code practices and platforms (e.g., Splunk, Microsoft Sentinel, Chronicle, Elastic SIEM).
• Working knowledge of MITRE ATT&CK framework and its application to detection coverage mapping and gap analysis.

AI & Emerging Threat Domains:
• Experience supporting or managing security programs that address AI/ML system monitoring, GenAI risk, or emerging technology threat vectors.
• Familiarity with AI-specific threat models and the unique detection challenges posed by LLMs, AI pipelines, and model serving infrastructure.

Program Management:
• Proven ability to manage complex, multi-workstream programs across cross-functional teams in matrixed organizations.
• Strong command of program management methodologies (Agile, SAFe, Waterfall, or hybrid) and tooling (e.g., Jira, Confluence, ServiceNow, Smartsheet).
• Demonstrated experience managing senior stakeholder relationships and communicating program status at executive level.

Cross-Functional Collaboration:
• Track record of successfully coordinating across diverse teams including security engineering, data/platform engineering, threat intelligence, and business stakeholders.
• Strong facilitation skills for workshops, planning sessions, and working group governance.

Soft Skills:
• Exceptional written and verbal communication skills with the ability to translate complex technical concepts for non-technical audiences.
• Strong organizational skills with a detail-oriented approach to risk, dependency, and issue management.
• Ability to operate effectively in ambiguous, fast-moving environments with competing priorities.
• Certifications (Preferred but not required): PMP, PgMP, SAFe Agilist, CISSP (Associate), or equivalent cybersecurity or program management credentials.

Education

A Bachelor's degree in Computer Science, Information Security, Business, or a related field is required, or equivalent professional experience.

Skillsets Required:

BFT CyberTech: BRD process management. Strong program mgmt skills for detecting engineering lifecycle management for SOC use cases

Roles & Responsibilities

Program & Product Management

This role requires a senior Program Manager with deep experience leading detection engineering lifecycle management for Security Operations Center (SOC) environments, with a specific focus on enabling and scaling d etection use cases for monitoring AI systems. The consultant will serve as the connective tissue across cross-functional teams spanning detection engineers, threat intelligence analysts, data engineers, platform teams, and business stakeholders driving

structured program delivery from detection conception through to production deployment and continuous improvement.

Key Responsibilities

Detection Engineering Program Management:
• Own and manage the end-to-end detection engineering lifecycle from use case ideation, requirements gathering, and prioritization through to development, validation, deployment, and tuning.
• Maintain and manage a structured detection use case backlog, ensuring alignment with SOC operational priorities and emerging threat landscapes.
• Define and enforce program governance standards, including intake processes, milestone tracking, and delivery cadences across detection engineering workstreams.
• Produce and communicate program status reports, risk registers, and delivery roadmaps for senior stakeholders and leadership.

AI System Monitoring Use Cases:
• Drive the identification, scoping, and delivery of detection use cases specifically targeting AI system behaviors, including model abuse, prompt injection, data exfiltration via AI interfaces, and anomalous AI pipeline activity.
• Collaborate with AI/ML engineering, data science, and security teams to translate AI-specific threat models into actionable detection requirements.
• Track the maturity and coverage of AI-focused detections, ensuring continuous improvement against evolving AI threat vectors.

Cross-Functional Stakeholder Management:
• Act as the primary program interface between detection engineering teams, SOC operations, threat intelligence, data platform, cloud engineering, and business stakeholders.
• Facilitate and lead cross-functional planning sessions, working groups, and steering committees to align priorities and resolve blockers.
• Manage dependencies, risks, and interdependencies across multiple concurrent detection engineering workstreams and teams.
• Build and maintain strong stakeholder relationships to ensure program transparency, buy-in, and accountability.

Process & Operational Excellence:
• Design and implement scalable program management frameworks, workflows, and tooling to support detection engineering at enterprise scale.
• Drive adoption of structured detection engineering methodologies (e.g., detection-as-code, use case tiering, coverage mapping to MITRE ATT&CK).
• Establish and track KPIs and OKRs for detection engineering program health, delivery velocity, and SOC impact.
• Continuously identify and implement process improvements to reduce cycle time and improve detection quality.

Documentation & Reporting:
• Maintain comprehensive program documentation including use case catalogues, decision logs, RACI matrices, and delivery plans.
• Develop executive-level reporting and narrative updates to communicate program progress, risks, and strategic value.
• Working knowledge of MITRE ATT&CK framework and its application to detection coverage mapping and gap analysis.

Salary Range: $90,000 to $115,000 per year