Senior Manager of Security Intelligence

As the Senior Manager of Security Intelligence, you will provide strategic leadership, organizational design, and vision for the Security Intelligence function. You will design and champion an automation-first, LLM-driven intelligence strategy across the enterprise, own the global incident response and vulnerability management capabilities, and collaborate with executive leadership to define, measure, and scale Corelight's overall corporate security posture.

Specific Responsibilities:

• Strategic Automation & Modernization Strategy: Define and execute the long-term vision for an automation-first culture, driving the adoption of next-generation security orchestration and LLM-first frameworks to radically compress response times across all enterprise environments.
• Executive Collaboration & Alignment: Partner with the CISO and cross-functional VP-level stakeholders to align security intelligence initiatives with broader business objectives, ensuring seamless integration across Product, Engineering, and Information Security.
• Metrics, Governance & Risk Reporting: Synthesize complex incident, threat, and vulnerability telemetry into strategic, high-impact executive dashboards and board-ready metrics, providing clear visibility into systemic risks and mitigation progress.
• Enterprise Incident Lifecycle Ownership: Serve as the ultimate authority for global security incident response, ensuring the organization maintains world-class readiness, continuous post-mortem evolution, and regulatory/compliance alignment.
• Organizational Design & Talent Cultivation: Lead, scale, and mentor a multi-tiered organization of high-performing security engineers and leads. Drive workforce planning, headcount budgeting, performance cultures, and career paths that attract and retain top-tier technical talent.

Knowledge/Skills/Abilities needed to be successful:

• Transformational Leadership: You view talent management as a strategic differentiator. You excel at building inclusive, high-performance cultures, aligning diverse engineering teams, and developing the next generation of security leaders.
• Strategic and Adaptive Vision: You anticipate market and threat-landscape shifts, proactively pivoting functional strategies to leverage cutting-edge paradigms (like generative AI and automated defense) before they become industry standard.
• Technical Credibility & Governance: While you operate as a strategic executive, you possess the deep technical foundation necessary to evaluate architectural decisions, challenge technical status quos, and champion rigorous engineering standards.
• Enterprise Autonomy: You are adept at operating with ultimate functional autonomy, translating high-level executive goals into clear execution roadmaps, managing operational budgets, and optimizing vendor ecosystems.
• Executive Communication: You possess exceptional communication skills, with a proven ability to translate deeply technical, high-risk security crises into calm, actionable, and risk-mitigated strategies for executive leadership and board members.

Qualifications/Requirements:

• Experience: A Bachelors or Masters degree in Computer Science, Cyber Security, or equivalent; a minimum of 810+ years of progressive experience in Security Intelligence, Threat Intel, or Security Operations.
• Leadership: Minimum of 5 years of formal people-management experience, with a proven track record of leading multi-tiered teams or expanding a specialized security function at scale.
• Framework & Compliance Governance: Expert-level understanding of major security frameworks (e.g., NIST, MITRE ATT&CK, SAIF) with demonstrable experience leveraging them to build enterprise risk and defense metrics.
• Program Oversight: Proven experience overseeing enterprise-wide offensive security programs, including comprehensive red-teaming, external penetration testing, and continuous vulnerability disclosure protocols.
• Automation Architecture: Demonstrated success in funding, designing, or implementing advanced automation (SOAR, custom LLM integrations) to optimize large-scale incident workflows.