Security Operations Lead

This is a fully remote position, open to applicants in Poland.

📋 Description

• Evaluate security vulnerabilities across Mend’s products and cloud infrastructure, and develop a prioritized enhancement strategy.

• Oversee daily cloud and infrastructure security operations, which include SIEM/SOC monitoring, WAF, CSPM, access reviews, encryption, and secrets management.

• Spearhead vulnerability management, encompassing Mend’s HackerOne bug bounty initiative and coordinating remediation efforts with the Engineering team.

• Direct security incident response and assist in disaster recovery planning and testing.

• Facilitate customer-facing security initiatives, such as questionnaires, RFPs, and technical security conversations during sales processes.

• Lead audit and certification efforts, including SOC 2 and ISO 27001/27701/27017, while ensuring compliance controls and evidence are maintained through Drata.

• Oversee third-party security evaluations and support security and AI governance.

• Act as a primary internal security advisor for various teams throughout the organization.

• Enhance and manage security tools, automation, and operational processes.

⛳️ Requirements

• Extensive experience in Security Operations, Cloud Security, Product Security, or a related field.

• Practical experience with cloud security technologies, vulnerability management, incident response, SIEM, WAF, CSPM, and IAM.

• Proven ability to collaborate closely with Engineering and Product teams.

• Knowledge of SOC 2, ISO 27001, and various security compliance frameworks.

• Excellent analytical, communication, and cross-functional teamwork abilities.

• A pragmatic, hands-on mindset with the capability to balance security risks with business requirements.

🏝️ Benefits

• Collaborative and empowering work environment.

• Respectful culture built on trust.

• Opportunities for growth and professional development.

• Flexible working conditions.

• Encouragement to apply even if not all qualifications are met.