Manager, Security Engineer – Operations

This is a fully remote position, open to applicants in California, +1 more state.

📋 Description

• Lead, mentor, and nurture a team of engineers and analysts focused on detection and response.

• Recruit, hire, and onboard skilled security professionals.

• Define the structure of the team, delineate roles, establish on-call rotations, and formulate hiring strategies.

• Oversee enterprise incident response, which includes investigation, containment, eradication, remediation, and post-incident reviews.

• Serve as the incident commander during significant security events and collaborate with Legal, Privacy, Communications, and executive leadership.

• Establish and sustain high-fidelity detections across cloud, identity, endpoint, SaaS, and application layers utilizing threat-informed methodologies like MITRE ATT&CK.

• Propel the adoption of AI technologies, including LLMs and AI agents, for alert triage, enrichment, investigation, and response.

• Develop detections for threats targeting AI systems and the use of enterprise AI.

• Create detection and response strategies for multi-tenant SaaS, encompassing tenant isolation, cross-tenant access, and the protection of customer data.

• Lead incident responses that affect customers and manage customer notifications accordingly.

• Take ownership of the security operations technology stack, which includes SIEM, SOAR, EDR/XDR, cloud detection and response, and log pipelines.

• Manage the security technology roadmap, budget, and vendor partnerships.

• Spearhead proactive threat hunting initiatives and incorporate threat intelligence.

• Collaborate with engineering, infrastructure, IT, application security, and GRC teams to address and mitigate risks.

• Develop and maintain automation, playbooks, integrations, and self-service security tools.

• Implement security controls, monitoring, and alerting; define and report metrics for MTTD and MTTR.

• Support compliance obligations and apply up-to-date knowledge of security operations, incident response, cloud security, and AI security.

⛳️ Requirements

• Profound expertise in detecting, investigating, and addressing security incidents, with a proven record in leading enterprise-wide incident responses.

• Demonstrated experience in managing, hiring, and developing security teams.

• Extensive background in securing and responding to incidents within large-scale multi-tenant SaaS environments.

• Practical experience utilizing AI, including LLMs and AI agents, in security operations.

• Strong familiarity with cloud platforms such as AWS, GCP, or Azure, Kubernetes, and containerized ecosystems.

• Competence with SIEM, SOAR, EDR/XDR, identity, and cloud detection technologies.

• Experience in integrating security tools into automated workflows.

• Proven ability to manage a security technology roadmap, including tool selection, budgeting, and vendor relations.

• Excellent problem-solving and troubleshooting capabilities.

• Strong communication skills for collaboration with engineering teams and effective communication with executives and customers during incidents.

• A high degree of curiosity, urgency, and a hands-on approach.

• Must reside in the United States and operate within the EST Time Zone.

🏝️ Benefits

• 100% employer-covered medical insurance.

• Generous paid time off, which may include paid vacation or flexible/unlimited vacation based on role and location.

• Paid sick leave.

• Inclusive parental leave policy.

• Paid holidays, including a year-end Global Week of Rest.

• Volunteer days off available.

• RSU stock grants.

• Opportunities for professional development and training.

• Company-sponsored virtual happy hours, complimentary meals, and enjoyable team-building events.

• Monthly stipend for cell phone expenses.

• Access to an innovative mental health support platform providing therapy, coaching, and self-guided mindfulness activities for eligible employees and their dependents.