Group Tech Lead, Security Threat Operations & Response Management

Stack

Responsibilities

• ▹Purple team strategy and technical leadership: define strategy for a fully integrated purple team function bridging red and blue team capabilities
• ▹Adversary emulation: design structured, intelligence-driven red team exercises that improve blue team detection and response playbooks
• ▹Security maturity and industry standards: lead Asana's maturity journey toward NIST CSF, ISO 27001, SOC 2, MITRE ATT&CK
• ▹Lifecycle management: develop and own the incident response lifecycle (playbooks, runbooks, post-incident review)
• ▹Vulnerability operations: design a comprehensive vulnerability management program
• ▹Process design and operational excellence: architect scalable security operations processes with automation
• ▹Detection engineering: standardize detection workflows, testing and tuning
• ▹AI-driven innovation: identify and implement AI/ML capabilities to enhance threat detection speed and accuracy

Requirements

• ▹Deep technical experience in both offensive and defensive security
• ▹Experience designing and leading purple team / red team-blue team programs
• ▹Knowledge of security maturity frameworks (NIST CSF, ISO 27001, SOC 2, MITRE ATT&CK)
• ▹Experience designing incident response lifecycle and vulnerability management programs
• ▹Applying automation and orchestration in security operations
• ▹Applying AI/ML to threat detection (text truncated)

Soft skills

About the company

Asana's security team proactively protects employees, users and customers; Warsaw office, office-centric hybrid model.