AVP, Engineering Security Operations Manager

Job Overview

The AVP, Engineering Security Operations will lead a team responsible for the operational effectiveness, improvement, and innovation of security engineering controls across LPL Financial.

Responsibilities

• Lead and manage a team of security engineers responsible for the day-to-day operations and maintenance of various security technologies, including but not limited to SIEM, EDR, DLP, vulnerability management tools, identity and access management systems, and network security appliances.
• Oversee the implementation, configuration, and optimization of security tools and platforms to enhance LPL Financial's security posture.
• Develop and implement operational playbooks, procedures, and runbooks for security incident response, threat hunting, and security tool management.
• Drive continuous improvement initiatives for security operations processes, tooling, and automation to increase efficiency and effectiveness.
• Collaborate with engineering, architecture, and other IT teams to ensure security requirements are integrated into the design and deployment of new systems and applications.
• Manage vendor relationships and evaluate new security technologies and services to identify potential benefits and risks.
• Provide technical leadership and mentorship to junior security engineers, fostering a culture of learning and professional development.
• Participate in incident response activities, providing expertise in security tool capabilities and operational procedures.
• Ensure compliance with regulatory requirements and internal security policies.
• Report on key security operational metrics and performance indicators to senior leadership.

Requirements

• 10+ years of experience in information security, with at least 5 years in a security operations or engineering leadership role across various security domains including network security, endpoint security, cloud security, identity and access management, and data loss prevention.
• 2+ years managing and optimizing SIEM platforms (e.g., Splunk, Exabeam, Sentinel).
• 2+ years with EDR solutions (e.g., CrowdStrike, SentinelOne, Microsoft Defender for Endpoint).
• 2+ years experience with vulnerability management platforms (e.g., Qualys, Tenable, Rapid7).

Core Competencies

• Solid understanding of scripting and automation languages (e.g., Python, PowerShell).
• Familiarity with cloud security concepts and platforms (AWS, Azure, GCP).
• Excellent leadership, communication, and interpersonal skills, with the ability to effectively manage a team and collaborate with diverse stakeholders.

Preferences

• Bachelor's or Master’s degree in Computer Science, Information Security, or a related field.
• Relevant industry certifications (e.g., CISSP, CISM, SANS certifications) are highly desirable.
• Experience in the financial services industry and an understanding of relevant regulatory frameworks (e.g., FINRA, SEC) is a plus.