Program Manager

Must Have Technical/Functional Skills

Required Skills & Experience

* 7+ years in program or project management, with at least 3+ years embedded within or directly supporting cybersecurity, SOC, or detection engineering functions.

Detection Engineering Lifecycle:

* Strong understanding of the detection engineering lifecycle, including use case development, SIEM rule authoring, alert tuning, and detection validation.

* Familiarity with detection-as-code practices and platforms (e.g., Splunk, Microsoft Sentinel, Chronicle, Elastic SIEM).

* Working knowledge of MITRE ATT&CK framework and its application to detection coverage mapping and gap analysis.

AI & Emerging Threat Domains:

* Experience supporting or managing security programs that address AI/ML system monitoring, GenAI risk, or emerging technology threat vectors.

* Familiarity with AI-specific threat models and the unique detection challenges posed by LLMs, AI pipelines, and model serving infrastructure.

Program Management:

* Proven ability to manage complex, multi-workstream programs across cross-functional teams in matrixed organizations.

* Strong command of program management methodologies (Agile, SAFe, Waterfall, or hybrid) and tooling (e.g., Jira, Confluence, ServiceNow, Smartsheet).

* Demonstrated experience managing senior stakeholder relationships and communicating program status at executive level.

Cross-Functional Collaboration:

* Track record of successfully coordinating across diverse teams including security engineering, data/platform engineering, threat intelligence, and business stakeholders.

* Strong facilitation skills for workshops, planning sessions, and working group governance.

Soft Skills:

* Exceptional written and verbal communication skills with the ability to translate complex technical concepts for non-technical audiences.

* Strong organizational skills with a detail-oriented approach to risk, dependency, and issue management.

* Ability to operate effectively in ambiguous, fast-moving environments with competing priorities.

* Certifications (Preferred but not required): PMP, PgMP, SAFe Agilist, CISSP (Associate), or equivalent cybersecurity or program management credentials.

Education

A Bachelor's degree in Computer Science, Information Security, Business, or a related field is required, or equivalent professional experience.

Skillsets Required:

BFT CyberTech: BRD process management. Strong program mgmt skills for detecting engineering lifecycle management for SOC use cases

Roles & Responsibilities

Program & Product Management

This role requires a senior Program Manager with deep experience leading detection engineering lifecycle management for Security Operations Center (SOC) environments, with a specific focus on enabling and scaling d etection use cases for monitoring AI systems. The consultant will serve as the connective tissue across cross-functional teams - spanning detection engineers, threat intelligence analysts, data engineers, platform teams, and business stakeholders - driving

structured program delivery from detection conception through to production deployment and continuous improvement.

Key Responsibilities

Detection Engineering Program Management:

* Own and manage the end-to-end detection engineering lifecycle - from use case ideation, requirements gathering, and prioritization through to development, validation, deployment, and tuning.

* Maintain and manage a structured detection use case backlog, ensuring alignment with SOC operational priorities and emerging threat landscapes.

* Define and enforce program governance standards, including intake processes, milestone tracking, and delivery cadences across detection engineering workstreams.

* Produce and communicate program status reports, risk registers, and delivery roadmaps for senior stakeholders and leadership.

AI System Monitoring Use Cases:

* Drive the identification, scoping, and delivery of detection use cases specifically targeting AI system behaviors, including model abuse, prompt injection, data exfiltration via AI interfaces, and anomalous AI pipeline activity.

* Collaborate with AI/ML engineering, data science, and security teams to translate AI-specific threat models into actionable detection requirements.

* Track the maturity and coverage of AI-focused detections, ensuring continuous improvement against evolving AI threat vectors.

Cross-Functional Stakeholder Management:

* Act as the primary program interface between detection engineering teams, SOC operations, threat intelligence, data platform, cloud engineering, and business stakeholders.

* Facilitate and lead cross-functional planning sessions, working groups, and steering committees to align priorities and resolve blockers.

* Manage dependencies, risks, and interdependencies across multiple concurrent detection engineering workstreams and teams.

* Build and maintain strong stakeholder relationships to ensure program transparency, buy-in, and accountability.

Process & Operational Excellence:

* Design and implement scalable program management frameworks, workflows, and tooling to support detection engineering at enterprise scale.

* Drive adoption of structured detection engineering methodologies (e.g., detection-as-code, use case tiering, coverage mapping to MITRE ATT&CK).

* Establish and track KPIs and OKRs for detection engineering program health, delivery velocity, and SOC impact.

* Continuously identify and implement process improvements to reduce cycle time and improve detection quality.

Documentation & Reporting:

* Maintain comprehensive program documentation including use case catalogues, decision logs, RACI matrices, and delivery plans.

* Develop executive-level reporting and narrative updates to communicate program progress, risks, and strategic value.

* Working knowledge of MITRE ATT&CK framework and its application to detection coverage mapping and gap analysis.

Salary Range: $90,000 to $115,000 per year

Desired Candidate Profile