Líder de Servicio EDR/XDR - Product Owner, Service Lead

This is a fully remote position, open to applicants in Portugal, +1 more country.

📋 Description

• Manage the complete lifecycle of the EDR/XDR service

• Define and update the product strategy

• Periodically review the capabilities catalog

• Maintain the technological evolution roadmap

• Assess new capabilities from CrowdStrike, Microsoft, Palo Alto, and Trend Micro

• Coordinate initiatives to enhance detection coverage

• Conduct comparative analyses between platforms and solutions

• Establish operational and technical standards

• Participate in service committees and regular reviews with clients

• Set KPIs and metrics for service adoption

• Identify opportunities for automation and operational optimization

• Lead initiatives to enhance customer experience and perceived service value

• Oversee the definition, governance, and evolution of the EDR/XDR service, including value proposition, capabilities catalog, service levels, deliverables, operational model, and technology roadmap

• Collaborate with the Service Manager and SOC teams to align strategy, client needs, and technological capabilities

• Provide support to business areas and pre-sales

⛳️ Requirements

• Over 8 years of experience in operational cybersecurity

• Proven experience in defining, evolving, and governing managed security services

• In-depth knowledge of EDR/XDR platforms, particularly CrowdStrike Falcon, Microsoft Defender XDR, Palo Alto Cortex XDR/XSIAM, and Trend Vision One

• Advanced understanding of threat detection and response methodologies

• Experience in designing services, catalogs, operational models, and technology evolution strategies

• Ability to translate business requirements into operational and technical capabilities

• Experience in defining KPIs, SLAs, XLAs, and value metrics for clients

• Knowledge of modern SOC architectures and MDR models

• Preferred certifications: CrowdStrike Certified Falcon Administrator (CCFA), CrowdStrike Certified Falcon Responder (CCFR), Microsoft SC-200, Microsoft SC-100, Palo Alto PCSAE, and Cortex XDR/XSIAM certifications

• Additional valuable knowledge in product management, Service Design, Service Management, Threat Intelligence, Exposure Management, Vulnerability Management, Security Operations Metrics, FinOps applied to security platforms, AI applied to security operations, and SOAR automation

🏝️ Benefits

• Attendance at conferences, presentations, and talks at cybersecurity congresses

• Extensive training catalog in technological competencies and certifications

• Language training with 12 options

• Personal skills training

• Access to Udemy and OpenWebinars

• Customized compensation: health insurance, meal vouchers, childcare, transportation card, and training

• Life insurance included

• Discounts on group products and services

• Permanent contract

• Flexible office hours

• Possibility of remote work

• Stability and a collaborative work environment

• Professional career development based on experience and personal potential