Manager, Threat Detection and Response

rst culture that fosters kindness, collaboration, and innovation, and empowers our Gurus with tools to fuel their career growth. Disrupting a trillion-dollar industry requires fresh and diverse perspectives. Come join us for the ride!

Role overview

CarGurus is seeking a Manager of Threat Detection and Response to help meet the evolving needs of our dynamic technical environment. Reporting to our Director of Information Security, you will play a key role in ensuring the security of CarGurus' network and cloud infrastructure by maturing the monitoring and response programs and the scalability of our security detection and response capabilities.

What you'll do

• Serve as the primary Incident Commander (IC) for significant security incidents, leading with a calm, decisive, and transparent approach from detection to remediation.

• Collaborate with the cross-functional incident response team to ensure rapid detection and containment of cyber threats.

• Act as a coach to develop and mature the Incident Response program, including on-call rotations, playbooks, and training a bench of future ICs.

• Collaborates with the Threat Detection and Response team to continuously improve cybersecurity capabilities in identification, management, and response to threats in the most efficient and effective manner.

• Lead the modernization of our detection and response program, establishing a "Detection-as-Code" (DaC) framework using version control and CI/CD principles.

• Foster a culture of rapid testing, iteration, and continuous improvement of all detection logic to reduce false positives and increase fidelity.

• Use your expertise in AWS security, Terraform, and Hashicorp Sentinel to influence the maturation of our cloud security posture.

• Challenge assumptions and experiment with novel approaches to gain visibility and enforce security policy as code in our cloud environments.

• Lead, mentor, and empower your team of security engineers, fostering a growth mindset and an environment of learning and development.

What you'll bring

• 7+ years in cybersecurity, with deep, hands-on experience in Incident Response, Detection Engineering, and/or Cloud Security.

• 3+ years in a formal leadership role, with a proven track record of coaching and developing small, highly technical teams.

• Direct, hands-on experience as an Incident Commander for complex security incidents.

• Practical experience with Detection & Response tools for network, endpoints, cloud, and identity as well as SOAR platforms.

• Demonstrate a strong security engineering and architecture background to best understand how to employ the most effective and efficient security monitoring.

• Deep expertise in AWS security and architecture (e.g., GuardDuty, CloudTrail, IAM) and a forward-looking vision for implementing currently-immature controls (e.g., SCPs, Control Tower).

• Hands-on experience with container security and data-layer security.

• Expert level knowledge on the attack kill chain and diamond model.

• Proven experience building or managing a "Detection-as-Code" program.

• Expertise in operationalizing the MITRE ATT&CK framework to measurably improve detection coverage.

The displayed range represents the expected annual base salary / On-Target Earnings (OTE) for this position. On-Target Earnings (OTE) is inclusive of base salary and on-target commission earnings, which applies exclusively to sales roles.

Individual pay within this range is determined by work location and other factors such as job-related skills, experience, and relevant education or training.

This annual base salary forms part of a comprehensive Total Rewards Package. In addition to benefits, this role may qualify for discretionary bonuses/incentives and Restricted Stock Units (RSUs).

Position Pay Range

$154,000 - $205,000 USD

Working at CarGurus

We reward our Gurus' curiosity and passion with best-in-class benefits and compensation, including equity for all employees, both when they start and as they continue to grow with us. Our career development and corporate giving programs, as well as our employee resource groups (ERGs) and communities, help people build connections while making an impact in personally meaningful ways. A flexible hybrid model and robust time off policies encourage work-life balance and individual well-being. Thoughtful perks like daily free lunch, a new car discount, meditation and fitness apps, commuting cost coverage, and more help our people create space for what matters most in their personal and professional lives.

We welcome all

CarGurus strives to be a place to which people can bring the ultimate expression of themselves and their potential-starting with our hiring process. We do not discriminate based on race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. We foster an inclusive environment that values people for their skills, experiences, and unique perspectives. That's why we hope you'll apply even if you don't check every box listed in the job description. We also encourage you to tell your recruiter if you require accommodations to participate in our hiring process due to a disability so we can provide the appropriate support. We want to know what only you can bring to CarGurus. #LI-Hybrid