Contract -Program & Product Management

Role and contract

Detection engineering and AI monitoring

• Own the detection engineering lifecycle from ideation and requirements through prioritization, development, validation, deployment, and tuning.
• Maintain the use case backlog and align it with SOC priorities and emerging threats.
• Develop and deliver detections for AI system behaviours such as model abuse, prompt injection, data exfiltration, and anomalous AI pipeline activity.
• Translate AI-specific threat models into actionable detection requirements and track coverage and maturity.

Programme governance and stakeholders

• Set programme governance standards, intake processes, milestone tracking, and delivery cadences.
• Report status, risks, and roadmaps to senior stakeholders and leadership.
• Coordinate detection engineering, SOC operations, threat intelligence, data platform, cloud engineering, and business stakeholders.
• Facilitate planning sessions and steering committees; manage dependencies, risks, and blockers.

Operational excellence and reporting

• Design scalable programme frameworks, workflows, and tooling for enterprise detection engineering.
• Promote detection-as-code, use case tiering, and MITRE ATT&CK coverage mapping.
• Establish KPIs and OKRs for programme health, delivery velocity, and SOC impact; improve cycle time and detection quality.
• Maintain use case catalogues, decision logs, RACI matrices, delivery plans, and executive reporting.

Required experience and skills

• 7+ years in programme or project management, including at least 3+ years supporting cybersecurity, SOC, or detection engineering functions.
• Strong understanding of detection lifecycle practices, including use case development, SIEM rule authoring, alert tuning, and detection validation.
• Working knowledge of MITRE ATT&CK for coverage mapping and gap analysis.
• Familiarity with detection-as-code practices and platforms such as Splunk, Microsoft Sentinel, Chronicle, or Elastic SIEM.