Manager, Security Engineer – Operations

This is a fully remote position, open to applicants in California, +1 more state.

📋 Description

• Lead, mentor, and nurture a team of detection and response engineers and analysts.

• Establish objectives, oversee performance, and facilitate career advancement.

• Recruit, hire, and onboard security professionals.

• Define the team's structure, roles, on-call schedules, and recruitment strategies.

• Oversee the enterprise incident response program, encompassing investigation, containment, eradication, remediation, and post-incident analysis.

• Serve as incident commander during significant security incidents.

• Collaborate with Legal, Privacy, Communications, and executive leadership.

• Develop and sustain high-fidelity detections across cloud, identity, endpoint, SaaS, and application layers utilizing threat-informed methodologies like MITRE ATT&CK.

• Propel AI integration, including LLMs and AI agents, for alert triage, enrichment, investigation, and response automation.

• Create detections for threats targeting AI systems and the use of enterprise AI.

• Design detection and response strategies for a multi-tenant SaaS platform.

• Lead incident response efforts impacting customers and coordinate customer notifications.

• Manage the security operations technology stack, which includes SIEM, SOAR, EDR/XDR, cloud detection and response, and log pipelines.

• Oversee the security technology roadmap, budget, and vendor relationships.

• Lead proactive threat hunting initiatives and incorporate threat intelligence.

• Collaborate with engineering, infrastructure, IT, application security, and GRC teams.

• Develop and maintain automation, playbooks, integrations, and self-service security tools.

• Implement security controls, monitoring, and alerting across the enterprise.

• Define and report metrics such as mean time to detect (MTTD) and mean time to respond (MTTR).

• Support compliance obligations.

• Leverage current knowledge of security operations, incident response, cloud security, and AI security to enhance the platform’s security posture.

⛳️ Requirements

• Extensive expertise in detecting, investigating, and responding to security incidents, with a proven history of leading enterprise-wide incident response efforts.

• Demonstrated experience in managing, hiring, and developing security teams.

• Significant experience securing and addressing incidents in large-scale multi-tenant SaaS environments.

• Strong understanding of tenant isolation and customer data protection.

• Practical experience applying AI, including LLMs and AI agents, to security operations.

• In-depth knowledge of risks associated with AI technology.

• Profound experience with cloud platforms such as AWS, GCP, or Azure.

• Familiarity with Kubernetes and containerized environments.

• Experience with cloud-native logging and detection mechanisms.

• Proficiency in SIEM, SOAR, EDR/XDR, identity, and cloud detection tools.

• Experience integrating security tools into automated processes.

• Proven track record of managing a security technology roadmap, including tool selection, budgeting, and vendor relations.

• Excellent problem-solving and troubleshooting capabilities.

• Strong communication skills for collaborating with engineering teams and engaging with executives and customers during incidents.

• A strong sense of curiosity, urgency, and a hands-on approach.

• Ability to work remotely from the United States within the EST time zone.

🏝️ Benefits

• 100% employer-covered medical insurance.

• Generous paid time off, including vacation or flexible/unlimited vacation based on role and location.

• Paid sick leave.

• Inclusive parental leave policies.

• Paid holidays, including a year-end Global Week of Rest.

• Volunteer days off.

• RSU stock grants.

• Opportunities for professional development and training.

• Virtual company happy hours.

• Complimentary food.

• Enjoyable team-building activities.

• Monthly mobile phone stipend.

• Access to an innovative mental health support platform providing therapy, coaching, and self-guided mindfulness exercises for eligible employees and their dependents.