Security & Threat Operations Manager

This is a fully remote position, open to applicants in California, +6 more states.

📋 Description

• Advance Security & Threat Operations through a measurable strategy, operational framework, monitoring scope, escalation protocols, and oversight of service providers.

• Develop and lead the team by recruiting, mentoring, training, fostering career growth, and managing performance.

• Oversee the detection program, encompassing threat intelligence, content creation, proactive hunting, attack simulations, and purple-team activities.

• Manage security monitoring and investigations across both product and corporate settings.

• Supervise digital risk monitoring for external attack surfaces, compromised credentials, exposed information, impersonation, phishing domains, and coordination of takedowns.

• Collaborate with Security Engineering to establish automated security response measures.

• Organize necessary non-automated response actions in conjunction with business leaders.

• Direct the incident response lifecycle as Incident Commander, covering preparedness, forensic evidence management, containment, recovery validation, regulatory coordination, and post-incident enhancements.

• Steer the exposure management lifecycle from identification to verified closure.

• Facilitate remediation efforts with responsible system and product owners.

• Manage and optimize DLP, WAF, email filtering, and identity compromise prevention controls.

• Collaborate with Legal, Compliance, Security Engineering, and GRC to implement SEC and FINRA regulations, including SEC Rules 17a-3 and 17a-4 controls.

• Automate control validation and evidence collection processes.

• Assist with audits and regulatory reviews, driving remediation of technical issues.

• Report directly to the Chief Information Security Officer.

• Coordinate responses across technical and business teams while partnering with Security Engineering, DevOps & Platform, and Product & Engineering.

⛳️ Requirements

• Over 10 years of experience in security operations, detection engineering, incident response, or related fields.

• At least 3 years of experience managing technical teams.

• Proven experience in building or enhancing an operations function.

• Experience acting as Incident Commander during major security incidents.

• Hands-on proficiency in threat intelligence, detection content creation, SIEM and endpoint analytics, investigations, threat hunting, and defensive validation.

• Practical skills in scripting or querying using Python, SQL, or similar languages.

• Familiarity with AWS, Kubernetes, API security, identity management, and Windows/macOS endpoint telemetry.

• Preferred experience supporting production environments with stringent availability and latency demands.

• Experience in creating, managing, and tuning DLP, WAF, and email filtering controls.

• Background in investigating insider threats and digital risks, such as exposed credentials, impersonation, and phishing domains.

• Strong leadership, process design, and prioritization abilities.

• Capability to influence Engineering and IT and provide support during on-call escalations and incident responses outside regular business hours.

• Familiarity with NIST CSF, incident response methodologies, and MITRE ATT&CK.

• Preferred experience in regulated financial services, including SEC/FINRA environments and relevant incident, data protection, and recordkeeping responsibilities.

• Bachelor’s degree in a relevant field or equivalent practical experience.

• Applicants must be eligible to work for any employer in the United States.

• Applicants must currently have the authorization to work in the United States without any current or future visa sponsorship.

🏝️ Benefits

• Competitive salary.

• Equity options.

• 401(k) matching.

• Medical insurance coverage.

• Dental insurance.

• Vision insurance.

• Disability insurance.

• Paid Parental Leave.

• Wellness reimbursement program.

• Company-provided mobile phone.

• Personal development funds.

• Generous Paid Time Off (PTO).

• Recognized holidays.

• Performance bonuses.

• Heavily subsidized benefits and perks.