Logo for Atlassian

Head of Detection and Response

Role overview

Qualifications

  • 15+ years in security
  • 7+ years leading multi-region detection/response or SOC/IR organizations
  • Proven success running high-severity incidents end to end
  • Depth in cloud platforms, identity, modern endpoint/EDR

Responsibilities

  • Own the global detection and response strategy, roadmap, and investment plan
  • Lead a multi-layer organization across time zones
  • Establish governance with clear OKRs, SLOs, and outcome dashboards
  • Operate a world-class IR function with 24x7 coverage

Key facts

Hard skills

Other skills

  • Leadership
  • Strategic Thinking
  • Problem Solving

About the company

Atlassian logo

Atlassian

Computer Software / SaaS

We're a team of 7000+ Atlassians supporting an international group of 170,000+ customers. We build tools like Jira, Confluence, Bitbucket, and Trello to help teams across the world become more nimble, creative, and aligned.

Company details

Company typeLarge
IndustryComputer Software / SaaS
Company size10001

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

The Head of Detection & Response (DnR) is a senior security engineering leader accountable for Atlassian’s global incident detection, response, threat intelligence, and security operations programs. This role drives strategy, execution, and measurable outcomes across cloud-first environments, enabling Atlassian to prevent, detect, and respond to threats at scale while building customer trust.

Working at Atlassian

Atlassians can choose where they work – whether in an office, from home, or a combination of the two. That way, Atlassians have more control over supporting their family, personal goals, and other priorities. We can hire people in any country where we have a legal entity.

Strategy and Leadership

  • Own the global detection and response strategy, roadmap, and investment plan, tying security outcomes to business risk and customer trust metrics.

  • Lead a multi-layer organization across time zones; build a high-performing leadership bench and succession plan.

  • Establish governance with clear OKRs, SLOs, and outcome dashboards for executive and board-level visibility.

Detection Engineering

  • Scale cloud-native detections across identity, data, endpoints, CI/CD, containers, and SaaS leveraging telemetry and modern rule engines.

  • Continuously reduce false positives and missed detections through quality gates, purple teaming, and regression testing pipelines.

Incident Response and Operations

  • Operate a world-class IR function with 24x7 coverage, incident management, executive comms, and customer/regulatory readiness.

  • Drive automation and playbooks for rapid containment, eradication, and recovery; blameless post-incident reviews with durable fixes.

Threat Intelligence and Hunting

  • Build an intel fusion capability that translates external and internal signals into prioritized detections and preemptive controls.

  • Run hypothesis-driven threat hunting focused on Atlassian-specific TTPs, with measurable findings-to-detection conversion.

Platform, Data, and AI Enablement

  • Partner with Trust Engineering to evolve the security data platform; ensure reliable, privacy-aware telemetry and lineage for detections and analytics.

  • Leverage ML/LLM-assisted detections, triage, and summarization responsibly; define evaluation frameworks and human-in-the-loop controls.

Risk, Compliance, and Partnering

  • Align with Product Security, Corporate Security, Governance/Risk, and Security Assessments to close systemic risks and meet customer/regulatory commitments.

  • Represent DnR in executive forums, customer escalations, and external audits; build trust through transparency and evidence.

Qualifications

  • 15+ years in security with 7+ years leading multi-region detection/response or SOC/IR organizations at large-scale cloud-first companies.

  • Proven success running high-severity incidents end to end, including executive and customer communications and regulatory readiness.

  • Depth in cloud platforms, identity, modern endpoint/EDR, data security, CI/CD security, and SaaS telemetry integration.

  • Track record deploying automation (SOAR) and measurable improvements in MTTD/MTTR with quality KPIs and SLOs.

  • Experience leading intel fusion or threat hunting teams; integrating ATT&CK, diamond model, and purple-team outcomes into detections.

  • Familiarity with privacy-by-design, secure AI usage, and evaluation frameworks for ML/LLM detection use cases.

  • Executive presence with board-level communication experience; ability to simplify complex incidents into actionable decisions.

Benefits & Perks

Atlassian offers a wide range of perks and benefits designed to support you, your family and to help you engage with your local community. Our offerings include health and wellbeing resources, paid volunteer days, and so much more. To learn more, visit go.atlassian.com/perksandbenefits.

About Atlassian

At Atlassian, we're motivated by a common goal: to unleash the potential of every team. Our software products help teams all over the planet and our solutions are designed for all types of work. Team collaboration through our tools makes what may be impossible alone, possible together.

We believe that the unique contributions of all Atlassians create our success. To ensure that our products and culture continue to incorporate everyone's perspectives and experience, we never discriminate based on race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status. All your information will be kept confidential according to EEO guidelines.

To provide you the best experience, we can support with accommodations or adjustments at any stage of the recruitment process. Simply inform our Recruitment team during your conversation with them.

To learn more about our culture and hiring process, visit go.atlassian.com/crh.

In line with local law, identity verification (which may include use of biometric data) is a condition of employment with Atlassian for employment fraud purposes.

Apply once. Then go straight to the hiring manager.

After you apply, unlock the direct contact details of the people who actually make the call. A quick follow-up makes you 5x more likely to land an interview.

MR

Marcus Rivera

Chief Revenue Officer

m.rivera@company.com
linkedin.com/in/marcusrivera
Unlocked after you apply
·

Related jobs

Other jobs at Atlassian

Premium

Reach out to the hiring manager directly.

Gain access to the contact details of the hiring managers who actually decide, and reach out to network with them directly. That, plus more when you upgrade:

  • Full match report with fit score and gaps
  • Career diagnostics on how recruiters read you
  • Curated company matches and warm intros
  • 48h early access to new roles

Cancel anytime.