Senior Manager, Detection and Response (Cyber Security)

About the role

FanDuel is seeking an experienced security leader to serve as Senior Manager, Detection and Response (DART). You will lead and scale DART, the operational engine and front-line defense within FanDuel's Cyber Fusion Center, covering security operations, advanced investigations, operational orchestration and detection improvements across multi-cloud, identity, endpoint and application ecosystems. The role suits someone who rose through the technical ranks, has built detection systems and run incident response, and wants to work hands-on with architecture, tooling and incident leadership.

Key responsibilities

• Build, mentor and lead a team of detection and incident response engineers, setting the technical roadmap and team rhythms, on-call schedules and KPIs.
• Drive proactive detection improvement by turning near-misses and false positives into tuning requests, correlation rules and telemetry backlogs.
• Own the CI/CD pipeline and improve the detection architecture with AI workflows and a neural detection deep learning layer backed by symbolic logic.
• Run day-to-day triage, queue health and case progression across SIEM, EDR, cloud, identity and application telemetry, and act as escalation point and response commander during critical incidents.
• Ensure clear handoffs to technology and engineering teams for remediation and service restoration, and partner with platform teams to maximize the impact of SAGE.
• Modernize playbooks, runbooks and tabletop exercises, and coordinate with Threat Intelligence, Security Escalations & Research, Legal, Privacy, Compliance and Risk.
• Hold the team accountable to operational SLOs/SLAs (MTTD, MTTC, triage velocity, case QA) and maintain auditable case management.

Required profile

• 8+ years in Detection and Response, with 3+ years managing incident responders and detection engineers.
• Proven ability to lead under pressure during high-stakes incidents and to communicate with executives and engineers.
• Experience moving teams beyond legacy ticket-clearing SOC models into intelligence-led, automated and agentic response.
• Track record of improving operational metrics such as MTTD, MTTR/MTTC and alert fidelity.

Required skills

• Deep knowledge of security operations, detection engineering, CI/CD pipelines, incident response and forensic analysis.
• Strong understanding of MITRE ATT&CK, NIST SP 800-61, PR3TACK and cloud security architecture.
• Nice to have: CISSP, CISM, GIAC GCIH/GCFA/GNFA/GCDA; agentic AI/LLM-assisted workflows and SOAR; Neuro-Symbolic AI in detection and response.

What we offer

• Salary range of $183,000 - $229,000 USD depending on experience, location and market.
• Medical, vision and dental insurance, life and disability insurance, 401(k) with up to a 5% match.
• Paid time off, 14 paid holidays, annual bonus and long-term incentives.
• Commuter benefits and pet insurance.