Note: The job is a remote job and is open to candidates in USA. Exabeam is a global cybersecurity leader delivering AI-driven security operations for threat detection, investigation, and response. The role leads the strategy and execution of threat detection content, behavioral analytics, and threat intelligence while engaging customers and cross-functional teams to shape a forward-looking detection roadmap. It combines hands-on threat research and detection analysis with organizational and technical leadership.
Responsibilities
- Establish threat detection roadmap with quarterly objectives, and execution plans aligned with company strategy
- Serve as a Subject Matter Expert for threat detection and response, setting the direction for detection engineering, behavioral analytics, and threat research
- Collaborate closely with Product Management, Threat Research, Engineering, Field teams to translate learnings from real world threats into product capabilities that provide the entire customer base value
- Contribute to customer and field enablement on threat detection and response topics
- Foster a culture of technical excellence, innovation, collaboration, and continuous improvement
- Guide research into emerging attacker tactics, techniques, procedures (TTPs), Agentic AI and adversary behaviors across enterprise, cloud, identity, and SaaS environments
- Levering metrics and real world feedback, drive the portfolio of detections, behavioral models, and analytics for the Exabeam product lines
- Continuously evaluate new attack techniques and validate detection efficacy through real world usage and feedback
- Perform hands-on threat research, threat analysis, incident analysis, detection tuning, and content validation where appropriate
- Balance strategic initiatives with operational execution to ensure timely delivery of research content and product updates
Skills
- 10+ years of experience in cybersecurity with significant expertise in threat detection, security research, threat intelligence, detection engineering, incident response, or related disciplines
- 5+ years operating SIEM, UEBA or similar threat detection and response platforms
- 3+ years working with customers in a professional services or product support role
- Deep understanding of modern attacker methodologies including MITRE ATT&CK, identity attacks, endpoint threats, cloud attacks, Agentic AI threats, insider threats, and lateral movement techniques
- Demonstrated experience developing high-quality security detections, behavioral analytics, correlation rules, or detection content for enterprise security products
- Strong understanding of UEBA, SIEM, behavioral analytics, and detection engineering principles
- Experience working with large-scale security telemetry including endpoint, identity, cloud, authentication, network, SaaS, and infrastructure logs
- Experience working with APIs, automation frameworks, and modern development workflows
- Strong analytical skills with the ability to evaluate detection quality, reduce false positives, and improve behavioral fidelity
- Excellent written and verbal communication skills with experience presenting technical concepts to both executive and technical audiences
- Proven ability to influence cross-functional teams and drive technical strategy
- Hands-on experience with the Exabeam platform and a deep understanding of the New-Scale Analytics engine
- Experience building behavioral models, machine learning features, or advanced detection logic
- Practical experience leveraging Generative AI, LLMs, agentic workflows, or AI-assisted development to improve engineering productivity and research effectiveness
- Experience with cloud platforms including AWS, Azure, and Google Cloud Platform
- Knowledge of identity providers such as Microsoft Entra ID, Okta, Active Directory, and hybrid identity environments
- Experience with malware analysis, reverse engineering, digital forensics, or incident response
- Familiarity with AI safety, evaluation, or prompt engineering techniques
- Security certifications such as CISSP, GREM, GCIH, GCFA, GPEN, OSCP, OSCE, GXPN, or equivalent
- Experience working in a commercial cybersecurity product organization
Benefits
- Extensive medical, dental and vision coverage to meet your healthcare needs and employer Health Savings Account contribution to help pay for health expenses now or in the future (subject to applicable eligibility requirements)
- Generous 401(k) employer match to help you save for your future (subject to applicable eligibility requirements)
- Paid Time off including “take what you need” flex time, volunteer day of service, your birthday, parental leave, holidays and more (subject to applicable eligibility requirements)
- Widespread learning center for career planning and skill development to grow your career (subject to applicable eligibility requirements)
- A culture of passionate, diverse, committed professionals (subject to applicable eligibility requirements)
Company Overview
Company H1B Sponsorship