Manager, Cyber Security

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Oversee and manage the daily operational functions of the Cyber Security Engineering team.

• Enhance operational capacity by refining planning, prioritization, delegation, and delivery methodologies.

• Advance and develop capabilities in incident response, detection engineering, automation, and security operations.

• Mentor, coach, and provide support to members of the Cyber Security Engineering team.

• Execute and enhance incident response procedures, which involve designing, developing, and implementing incident response playbooks.

• Facilitate incident response efforts across interdisciplinary teams.

• Offer technical and operational guidance in evaluating system design, changes, and operational risks.

• Engage in and enhance the weekly on-call rotation, focusing on escalation, response quality, handover, and operational readiness.

• Lead the design, development, and deployment of reliable, maintainable, and scalable security solutions.

• Advise and assist in detection engineering across both enterprise and SaaS environments.

• Identify operational deficiencies, risks, and areas for security enhancement, converting them into clear, actionable solutions.

• Align operational objectives with the broader CSE vision, roadmap, and strategic goals.

• Collaborate across functions on roadmap initiatives, projects, and security enhancements.

• Work alongside engineering, infrastructure, product, and operations teams to enhance security outcomes at Ping.

⛳️ Requirements

• Proven experience in leading or managing daily security operations, security engineering, incident response, or technical operations teams.

• Strong expertise in operational delivery, including prioritization, planning, delegation, and ongoing improvement.

• Experience in building team capacity, enhancing operational processes, and developing technical skills within a security function.

• Required experience in Incident Response, particularly in coordinating complex incidents involving multiple teams.

• Familiarity with automation in Security Orchestration and Automation tools, along with custom scripting automation.

• Knowledge of Security Information and Event Management systems, preferably Google Chronicle and YARA-L.

• Solid understanding of cloud environments, ideally AWS and GCP.

• Experience with container technologies, especially Kubernetes and Docker, in development and incident response scenarios.

• Background in deploying, operating, or utilizing Endpoint Detection and Response tools.

• Proven experience leading cross-functional projects and influencing teams outside of direct reporting structures.

• Ability to articulate operational priorities, technical risks, and delivery trade-offs effectively to both technical and non-technical stakeholders.

• Strong judgment, ownership, and decision-making capabilities during security incidents and operational escalations.

• Participation in the team’s on-call rotation is a requirement for this role.

🏝️ Benefits

• Flexible and collaborative work environment.

• Company culture that empowers employees to achieve their best work.

• Employee Resource Groups.

• Regular team and company bonding events.

• Competitive benefits and perks.

• Global volunteering and community initiatives.

• Generous Paid Time Off (PTO) and Holiday Schedule.

• Parental Leave.

• Progressive Healthcare Options.

• Retirement Programs.

• Opportunity for Education Reimbursement.

• Commuter Offset available in specific locations.