Manager, Security Research

Responsibilities

• Serve as the technical leader for Exabeam Security Research, setting the direction for detection engineering, behavioral analytics, and threat research.
• Lead research into emerging attacker tactics, techniques, procedures (TTPs), and adversary behaviors across enterprise, cloud, identity, and SaaS environments.
• Design, develop, validate, and maintain high-fidelity detections, behavioral models, and analytics for the Exabeam platform.
• Act as a subject matter expert on the analytics engine, driving improvements to behavioral analytics, model quality, detection coverage, and accuracy.
• Develop security content that leverages the full Exabeam platform, including behavioral analytics, UEBA, search, automation, investigation workflows, and detection engineering capabilities.
• Continuously evaluate new attack techniques and validate detection efficacy through research, simulation, purple teaming, adversary emulation, and lab testing.
• Perform hands-on threat research, malware analysis, incident analysis, detection tuning, and content validation where appropriate.
• Collaborate closely with Product Management, Engineering, AI, and Customer Success teams to translate emerging threats into product capabilities and customer value.
• Contribute to technical thought leadership through blogs, conference presentations, webinars, whitepapers, and community engagement.
• AI & Detection Innovation Champion the practical application of AI and Large Language Models (LLMs) across the Security Research organization.
• Identify opportunities to improve researcher productivity through AI-assisted research, detection development, testing, documentation, and content generation.
• Develop processes and guardrails for responsible use of AI in research workflows while maintaining detection quality and accuracy.
• Partner with Exabeam AI teams to evaluate emerging AI capabilities and incorporate them into research operations.
• Drive continuous improvements in speed-to-market for new detections through automation, AI-assisted engineering, and repeatable development processes.

Qualifications

• 10+ years of experience in cybersecurity with significant expertise in threat detection, security research, threat intelligence, detection engineering, incident response, or related disciplines.
• 2+ years of experience leading or managing highly technical engineering or security research teams.
• Deep understanding of modern attacker methodologies including MITRE ATT&CK, identity attacks, endpoint threats, cloud attacks, insider threats, and lateral movement techniques.
• Demonstrated experience developing high-quality security detections, behavioral analytics, correlation rules, or detection content for enterprise security products.
• Strong understanding of UEBA, SIEM, behavioral analytics, and detection engineering principles.
• Experience working with large-scale security telemetry including endpoint, identity, cloud, authentication, network, SaaS, and infrastructure logs.
• Hands-on experience writing production-quality code and automation using Python and related scripting languages.
• Experience working with APIs, automation frameworks, and modern development workflows.
• Strong analytical skills with the ability to evaluate detection quality, reduce false positives, and improve behavioral fidelity.
• Excellent written and verbal communication skills with experience presenting technical concepts to both executive and technical audiences.
• Proven ability to influence cross-functional teams and drive technical strategy.