The role: own TeraSky's technical and market presence across EDR/XDR, SIEM, and SOAR, from evangelism and thought leadership through to customer engagements and won deals.
The team: Reports directly to the CTO. This is a new practice built from zero, not a slot in an established team.
Responsibilities:
Build TeraSky's Detection & Response practice around EDR/XDR, SIEM, SOAR, and security data lake architectures, starting from nothing
Define and run the full presales cycle, from demos and POC scoping through to a signed architecture
Establish TeraSky's public voice in the category through conferences, meetups, and technical content
Feed field intelligence back to the CTO office to shape portfolio and services decisions
Create the reference accounts that make TeraSky a leading cybersecurity partner in Israel
Requirements:
Experience designing end-to-end detection and response architectures.
8-12 years including hands-on SOC work (analyst, incident response, or detection engineering).
Hands-on experience with at least one product in each category:
SIEM: Splunk, Microsoft Sentinel, QRadar, or Google SecOps
SOAR: Splunk SOAR, Tines, Torq, or Swimlane
EDR/XDR: CrowdStrike, SentinelOne, Microsoft Defender, or Trend Vision One
Advantage:
Experience producing solution designs or architecture documentation (HLD, sizing, integration approach).
A track record of running presales cycles end to end, at a security vendor, MSSP or integrator.
Public speaking, writing, or community presence in security.
Palo Alto certifications: PCNSE, Cortex XSIAM specialist tracks.
Hands-on experience with a unified SecOps platform: CrowdStrike Falcon platform, SentinelOne Singularity platform, or Microsoft Unified SecOps
