Manager - Detection Security

Role Overview

The threat landscape doesn’t sit still, and neither do we. As the Manager of Detection Security , you will lead a modern, engineering-first team responsible for building, scaling, and evolving our threat detection ecosystem. This is not a traditional, siloed monitoring role; it is a highly dynamic position that sits at the intersection of security engineering, data analytics, and cross-functional infrastructure. You will champion a "Detection-as-Code" philosophy, shifting our posture from reactive alerting to proactive, automated visibility. If you are a continuous learner who thrives on translating complex systemic risks into elegant engineering solutions while bridging the gap between security and core business units, this role is designed for you.

The Impact You Can Create

Transform Detection into Engineering : Shift the organization away from rigid, legacy alert fatigue toward a scalable, automated Detection-as-Code pipeline that adapts instantly to infrastructure changes.

Bridge Organizational Silos : Act as a critical consultative partner to DevOps, Product, and IT teams, embedding detection metrics seamlessly into their existing workflows.

Cultivate a High-Agility Team : Build an inclusive environment focused on rapid upskilling, curiosity, and cross-training, ensuring the team can pivot effortlessly as technologies change.

Elevate Proactive Resilience : Reduce the time-to-detect (TTD) across complex multi-cloud environments by anticipating modern adversary behaviors rather than just chasing known signatures.

Roles & Responsibilities (R&R)

Team Leadership & Mentorship : Lead, coach, and support a diverse team of detection engineers, fostering a culture of continuous experimentation, physiological safety, and growth.

Cross-Functional Collaboration : Partner actively with software engineering and infrastructure teams to ensure telemetry, logging, and monitoring are natively built into new product rollouts.

Agile Strategy & Execution : Oversee the lifecycle of threat detection use cases, adapting framework methodologies (like MITRE ATT&CK) to fit our unique business context.

Incident Response & Calibration : Work hand-in-hand with the Incident Response team to continuously post-mortem security events, translating lessons learned into robust new detection strategies.

Vendor & Tool Agnosticism : Evaluate, implement, and lifecycle security tools, focusing on architectural flexibility rather than becoming reliant on a single vendor ecosystem.

Skills & Core Competencies

Technical Foundations

• Modern Detection Paradigms : Strong conceptual understanding of log aggregation, SIEM/Data Lake architectures, EDR, and cloud-native security telemetry (AWS, Azure, or GCP).
• Automation Mindset : Familiarity with scripting/programming (e.g., Python, Go) and infrastructure-as-code principles to drive automation in detection pipelines.
• Threat Modeling : Ability to analyze systems and predict vector vulnerabilities across varied deployment environments.

Adaptability & Learning Agility

• Tech-Stack Fluidity : A proven ability to quickly learn, adopt, and deploy new, unfamiliar technologies and cloud services as the company’s infrastructure evolves.
• Comfort with Ambiguity : Ability to steer the team effectively through fast-paced organizational changes, shifting priorities, and evolving threat conditions.
• Creative Problem Solving : A tendency to question legacy "best practices" in favor of bespoke, highly efficient security solutions.

Cross-Functional & Human Skills

• Translational Communication : The ability to articulate deeply technical security risks into clear, business-focused impact statements for non-security stakeholders.
• Empathy-Driven Leadership : A collaborative management style that prioritizes understanding the goals of other engineering teams rather than simply enforcing security mandates.
•  

Qualifications & Experience

Demonstrated Leadership : Experience leading, managing, or mentoring technical security professionals, with a clear track record of developing talent.

Cross-Functional Background : Experience working closely with (or directly within) non-security technical fields such as DevOps, Systems Engineering, or Software Development is highly valued.

Proven Track Record of Evolution : A professional history that demonstrates self-driven learning, adapting to major technological shifts, or managing non-traditional security projects.

Continuous Education : While formal degrees or certifications (e.g., CISSP, GCIA, CISM) are respected, we place a premium on a proven appetite for ongoing learning, hands-on lab work, open-source contributions, or real-world problem-solving experience.

At Freshworks, we have fostered an environment that enables everyone to find their true potential, purpose, and passion, welcoming colleagues of all backgrounds, genders, sexual orientations, religions, and ethnicities. We are committed to providing equal opportunity and believe that diversity in the workplace creates a more vibrant, richer environment that boosts the goals of our employees, communities, and business. Fresh vision. Real impact. Come build it with us.