Job Opportunities API

ABOUT US Todyl puts world-class networking and security within reach of every business. The Todyl Security Platform converges SASE, SIEM, Endpoint Security, GRC, MXDR, and more into a cloud-native, single-agent platform specifically built for MSPs, MSSPs, and Mid-Market IT Professionals. We are a fast-paced, dynamic start-up, passionate about simplifying complex networking and security for businesses of all sizes. ABOUT THE ROLE We are seeking a Senior Manager to lead the two engineering teams that build and operate our core security systems: the Detection Engine, Threat Intelligence Platform, SOAR, and Case Management. These systems power how our SOC, Detection Engineering, and Threat Intelligence functions detect threats, hunt, and work alerts—and how the results of that work are presented to our partners through cases. Their quality is directly visible in the detection and response outcomes our partners receive. This role reports to the Security leader. This is a hands-on engineering leadership role. Roughly 80% of your time is management and delivery leadership; roughly 20% is technical contribution through architecture, design reviews, standards, and prototyping—not critical-path development. Your teams own production operations for these systems, including on-call, and you own their delivery quality, roadmap, and the quality of their partner-visible surfaces. Our security practitioners are your customers: SOC, Detection Engineering, and Threat Intelligence define requirements and serve as the acceptance gate for security-facing functionality. Your teams own and iterate on the platforms themselves. As an AI-first security organization, our security practitioners build agentic workflows—detection authoring, intelligence enrichment, validation automation—directly on these systems, making platform extensibility and workflow support core requirements of what your teams deliver. RESPONSIBILITIES TEAM LEADERSHIP & DEVELOPMENT (DAILY / WEEKLY) - Manage two system-aligned engineering teams covering the Detection Engine, TIP, SOAR, and Case Management - Own hiring, performance, coaching, and career development for the engineering group, including developing team leads and senior engineers into broader leadership responsibilities - Maintain a high technical bar through design reviews, code review standards, and architectural guidance DELIVERY QUALITY & PRODUCTION OWNERSHIP (DAILY / ONGOING) - Own the definition of done: establish acceptance criteria for security-facing functionality with operator sign-off from SOC, Detection Engineering, and Threat Intelligence - Own production operations for these systems: on-call rotations, incident review, SLOs, and reliability engineering - Own release quality and delivery predictability across both teams - Coordinate shared infrastructure, deploy tooling, and engineering standards with our central Engineering organization ROADMAP & PRODUCT OWNERSHIP (WEEKLY / QUARTERLY) - Own the roadmap for the Detection Engine, TIP, SOAR, and Case Management, balancing operator needs, platform health, and partner-visible improvements - Run product discipline for these systems: quarterly planning, success metrics, and written problem statements for major initiatives - Own the quality and roadmap of partner-visible surfaces—case presentation foremost, as the primary way partners see the value of our security work—drawing partner signal from our customer-facing teams and coordinating with Product Management on go-to-market and the SIEM boundary - Own the alert-working and threat hunting workflows these systems provide: investigation surfaces, hunt tooling and query capabilities, and the alert-to-case lifecycle TECHNICAL CONTRIBUTION (~20%, ONGOING) - Set and evolve the architectural direction for streaming detection infrastructure, intelligence pipelines, and automation systems - Contribute through design documents, prototypes, and technical standar