Group Tech Lead, Security Threat Operations & Response Management

Asana is a work management platform that integrates human and AI collaboration to help organizations plan, track, and deliver work efficiently. It serves over 170,000 organizations including Accenture, Amazon, Anthropic, Morningstar, and Suzuki.

• 8+ years of progressive experience in security operations, threat detection and response, or offensive security.
• At least 3 years in a senior technical leadership or principal engineering role.
• Deep expertise across red and blue team disciplines with experience leading a purple team or integrated threat operations programme.
• Strong command of SIEM platforms for detection engineering and advanced log correlation.
• Extensive knowledge of EDR platforms for proactive threat hunting.
• Expert-level familiarity with adversary emulation frameworks and forensic analysis in large cloud-native environments.
• Strong engineering and automation skills using scripting languages and exposure to SOAR platforms.

Nice to have:

• Familiarity with SIEM platforms such as Panther, Splunk, or Elastic Security.
• Experience with EDR platforms like CrowdStrike or SentinelOne.
• Knowledge of scripting languages beyond Python, such as PowerShell.
• Exposure to AI/ML tools for enhancing threat detection and response.

• Define and own the technical strategy for a fully integrated purple team function bridging offensive and defensive capabilities.
• Design and implement a structured adversary emulation programme based on real threat intelligence.
• Lead the security maturity journey, defining a roadmap aligned with frameworks such as NIST CSF, ISO 27001, SOC 2, and MITRE ATT&CK.
• Develop, own, and continuously improve the end-to-end incident response lifecycle including policies and playbooks.
• Design and implement a comprehensive vulnerability management program covering discovery, prioritization, SLA tracking, and remediation validation.
• Architect scalable security operations processes that reduce manual toil through automation and orchestration.