Security Engineering Manager, Security Operations & Incident Response

Security Engineering Manager, Security Operations & Incident Response Responsibilities

Support a team of security engineers and analysts who hunt, detect, and respond to internal and external threats.

Influence and align the organization's vision and strategy, while engaging the team to develop and deliver specific, multi-year roadmaps, programs, and projects.

Ensure prioritization, resourcing, and timely delivery of project work within a changing business environment.

Define operational metrics, key performance indicators, and service level objectives to assure the team achieves operational excellence across Security Operations, Incident Response and Investigation services.

Hire, grow, and build a team capable of meeting defined goals and delivering measurable outcomes capable of achieving the team's mission.

Coach, mentor, support, and care for the team in a way that enables long-term career development, happiness, and success at scale.

Work with, partner, and influence other teams to develop engineering solutions designed to mitigate security risks and automate investigative and operational workloads.

Build, cultivate, and maintain positive relationships with cross-functional partners to enable the team's ability to effectively and efficiently execute on the service portfolio.

Apply broad technical and process expertise across Security Operations and Incident Response domains to guide team decisions, inform strategy, and resolve complex issues.

Collaborate with a wide range of cross-functional partners and teams to develop scalable and flexible investigative and incident response services.

Focus on ruthlessly prioritizing, automating, and scaling every aspect of our Security Operations and Incident Response capabilities.

Minimum Qualifications

10+ years of work experience in Security Operations, Incident Response and Investigations, including 2+ years of proven hands-on technical management experience of security engineers and analysts

Experience recruiting, building, and leading technical teams, including performance management

Experience developing and delivering information on program status and security incidents for senior leadership

Experience leading and managing complex multi-year cross-functional programs

Knowledge of operating systems, file systems, and memory on Windows, MacOS, or Linux

Experience with an interpreted programming language (PHP, Python, Perl, Ruby, etc.)

Experience with attacker tactics, techniques and procedures

Experience working across security, risk management, and compliance domains

BA/BS in Computer Science or equivalent experience in security

Preferred Qualifications

Background in intrusion detection, security investigations, insider threats or digital forensics

experience as a Lead security incident response engineer in a large, global and regulated organization

Broad knowledge across the Security domain, as well as deep focus in one (or more) areas such as Logs and events processing, Incident Management, Digital Forensics, Detection and/or response tool development

Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)

Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)

Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies

Equal Employment Opportunity